https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 18:19:22 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-207109 EUVD-2026-207109 https://cve.radiocsirt.org/vuln/euvd-2026-207109 https://cve.radiocsirt.org/vuln/fkie_cve-2024-11986 <p>Improper input handling in the &#39;Host Header&#39; allows an unauthenticated attacker to store a payload in web application logs. When an Administrator views the logs using the application&#39;s standard functionality, it enables the execution of the payload, resulting in Stored XSS or &#39;Cross-Site Scripting&#39;.</p> <p>Improper input handling in the &#39;Host Header&#39; allows an unauthenticated attacker to store a payload in web application logs. When an Administrator views the logs using the application&#39;s standard functionality, it enables the execution of the payload, resulting in Stored XSS or &#39;Cross-Site Scripting&#39;.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-11986 https://cve.radiocsirt.org/vuln/ghsa-7hgq-c3gv-933p <p>Improper input handling in the &#39;Host Header&#39; allows an unauthenticated attacker to store a payload in web application logs. When an Administrator views the logs using the application&#39;s standard functionality, it enables the execution of the payload, resulting in Stored XSS or &#39;Cross-Site Scripting&#39;.</p> <p>Improper input handling in the &#39;Host Header&#39; allows an unauthenticated attacker to store a payload in web application logs. When an Administrator views the logs using the application&#39;s standard functionality, it enables the execution of the payload, resulting in Stored XSS or &#39;Cross-Site Scripting&#39;.</p> https://cve.radiocsirt.org/vuln/ghsa-7hgq-c3gv-933p https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3702 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in CrushFTP ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in CrushFTP ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3702