Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:13:33 +0000 bdu:2023-07458 https://cve.radiocsirt.org/vuln/bdu:2023-07458 bdu:2023-07458 https://cve.radiocsirt.org/vuln/bdu:2023-07458 EUVD-2026-161706 https://cve.radiocsirt.org/vuln/euvd-2026-161706 EUVD-2026-161706 https://cve.radiocsirt.org/vuln/euvd-2026-161706 fkie_cve-2023-1720 https://cve.radiocsirt.org/vuln/fkie_cve-2023-1720 <p>Lack of mime type response header in Bitrix24 22.0.300 allows authenticated remote attackers to execute arbitrary JavaScript code in the victim&#39;s browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via uploading a crafted HTML file through /desktop_app/file.ajax.php?action=uploadfile.</p> <p>Lack of mime type response header in Bitrix24 22.0.300 allows authenticated remote attackers to execute arbitrary JavaScript code in the victim&#39;s browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via uploading a crafted HTML file through /desktop_app/file.ajax.php?action=uploadfile.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-1720 GHSA-3f75-53r3-6ghw https://cve.radiocsirt.org/vuln/ghsa-3f75-53r3-6ghw <p>Lack of mime type response header in Bitrix24 22.0.300 allows authenticated remote attackers to execute arbitrary JavaScript code in the victim&#39;s browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via uploading a crafted HTML file through /desktop_app/file.ajax.php?action=uploadfile.</p> <p>Lack of mime type response header in Bitrix24 22.0.300 allows authenticated remote attackers to execute arbitrary JavaScript code in the victim&#39;s browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via uploading a crafted HTML file through /desktop_app/file.ajax.php?action=uploadfile.</p> https://cve.radiocsirt.org/vuln/ghsa-3f75-53r3-6ghw gsd-2023-1720 https://cve.radiocsirt.org/vuln/gsd-2023-1720 gsd-2023-1720 https://cve.radiocsirt.org/vuln/gsd-2023-1720