https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:35:08 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-8260 EUVD-2026-8260 https://cve.radiocsirt.org/vuln/euvd-2026-8260 https://cve.radiocsirt.org/vuln/fkie_cve-2023-26450 <p>The &#34;OX Count&#34; web service did not specify a media-type when processing responses by external resources. Malicious script code can be executed within the victims context. This can lead to session hijacking or triggering unwanted actions via the web interface and API. To exploit this an attacker would require temporary access to the users account or lure a user to a compromised account. We are now defining the accepted media-type to avoid code execution. No publicly available exploits are known.</p> <p>The &#34;OX Count&#34; web service did not specify a media-type when processing responses by external resources. Malicious script code can be executed within the victims context. This can lead to session hijacking or triggering unwanted actions via the web interface and API. To exploit this an attacker would require temporary access to the users account or lure a user to a compromised account. We are now defining the accepted media-type to avoid code execution. No publicly available exploits are known.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-26450 https://cve.radiocsirt.org/vuln/ghsa-9ppx-xr68-cm59 <p>The &#34;OX Count&#34; web service did not specify a media-type when processing responses by external resources. Malicious script code can be executed within the victims context. This can lead to session hijacking or triggering unwanted actions via the web interface and API. To exploit this an attacker would require temporary access to the users account or lure a user to a compromised account. We are now defining the accepted media-type to avoid code execution. No publicly available exploits are known.</p> <p>The &#34;OX Count&#34; web service did not specify a media-type when processing responses by external resources. Malicious script code can be executed within the victims context. This can lead to session hijacking or triggering unwanted actions via the web interface and API. To exploit this an attacker would require temporary access to the users account or lure a user to a compromised account. We are now defining the accepted media-type to avoid code execution. No publicly available exploits are known.</p> https://cve.radiocsirt.org/vuln/ghsa-9ppx-xr68-cm59 https://cve.radiocsirt.org/vuln/gsd-2023-26450 gsd-2023-26450 https://cve.radiocsirt.org/vuln/gsd-2023-26450 https://cve.radiocsirt.org/vuln/oxas-adv-2023-0003 OXAS-ADV-2023-0003 https://cve.radiocsirt.org/vuln/oxas-adv-2023-0003