https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 06:32:54 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-253384 EUVD-2026-253384 https://cve.radiocsirt.org/vuln/euvd-2026-253384 https://cve.radiocsirt.org/vuln/fkie_cve-2021-4406 <p>An authenticated attacker is able to create alerts that trigger a stored XSS attack.</p> <p>POC</p> <p>* go to the alert manager</p> <p>* open the ITSM tab * add a webhook with the URL/service token value</p> <p>&#39; -h &amp;&amp; id | tee /tmp/ttttttddddssss #&#39; (whitespaces are tab characters)</p> <p>* click add</p> <p>* click apply</p> <p>* create a test alert</p> <p>* The test alert will run the command</p> <p>“id | tee /tmp/ttttttddddssss” as root.</p> <p>* after the test alert inspect</p> <p>/tmp/ttttttddddssss it&#39;ll contain the ids of the root user.</p> <p>An authenticated attacker is able to create alerts that trigger a stored XSS attack.</p> <p>POC</p> <p>* go to the alert manager</p> <p>* open the ITSM tab * add a webhook with the URL/service token value</p> <p>&#39; -h &amp;&amp; id | tee /tmp/ttttttddddssss #&#39; (whitespaces are tab characters)</p> <p>* click add</p> <p>* click apply</p> <p>* create a test alert</p> <p>* The test alert will run the command</p> <p>“id | tee /tmp/ttttttddddssss” as root.</p> <p>* after the test alert inspect</p> <p>/tmp/ttttttddddssss it&#39;ll contain the ids of the root user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-4406 https://cve.radiocsirt.org/vuln/ghsa-2xf9-j9jw-g7f7 <p>An administrator is able to execute commands as root via the alerts management dialog</p> <p>An administrator is able to execute commands as root via the alerts management dialog</p> https://cve.radiocsirt.org/vuln/ghsa-2xf9-j9jw-g7f7 https://cve.radiocsirt.org/vuln/gsd-2021-4406 gsd-2021-4406 https://cve.radiocsirt.org/vuln/gsd-2021-4406