https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 08:03:36 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-245156 EUVD-2026-245156 https://cve.radiocsirt.org/vuln/euvd-2026-245156 https://cve.radiocsirt.org/vuln/fkie_cve-2023-25719 <p>ConnectWise Control before 22.9.10032 (formerly known as ScreenConnect) fails to validate user-supplied parameters such as the Bin/ConnectWiseControl.Client.exe h parameter. This results in reflected data and injection of malicious code into a downloaded executable. The executable can be used to execute malicious queries or as a denial-of-service vector. NOTE: this CVE Record is only about the parameters, such as the h parameter (this CVE Record is not about the separate issue of signed executable files that are supposed to have unique configurations across customers&#39; installations).</p> <p>ConnectWise Control before 22.9.10032 (formerly known as ScreenConnect) fails to validate user-supplied parameters such as the Bin/ConnectWiseControl.Client.exe h parameter. This results in reflected data and injection of malicious code into a downloaded executable. The executable can be used to execute malicious queries or as a denial-of-service vector. NOTE: this CVE Record is only about the parameters, such as the h parameter (this CVE Record is not about the separate issue of signed executable files that are supposed to have unique configurations across customers&#39; installations).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-25719 https://cve.radiocsirt.org/vuln/ghsa-v2q6-5m4m-pr58 <p>ConnectWise Control before 22.9.10032 (formerly known as ScreenConnect) fails to validate user-supplied parameters such as the Bin/ConnectWiseControl.Client.exe h parameter. This results in reflected data and injection of malicious code into a downloaded executable. The executable can be used to execute malicious queries or as a denial-of-service vector.</p> <p>ConnectWise Control before 22.9.10032 (formerly known as ScreenConnect) fails to validate user-supplied parameters such as the Bin/ConnectWiseControl.Client.exe h parameter. This results in reflected data and injection of malicious code into a downloaded executable. The executable can be used to execute malicious queries or as a denial-of-service vector.</p> https://cve.radiocsirt.org/vuln/ghsa-v2q6-5m4m-pr58 https://cve.radiocsirt.org/vuln/gsd-2023-25719 gsd-2023-25719 https://cve.radiocsirt.org/vuln/gsd-2023-25719