https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 13:57:51 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-188176 EUVD-2026-188176 https://cve.radiocsirt.org/vuln/euvd-2026-188176 https://cve.radiocsirt.org/vuln/fkie_cve-2024-41725 <p>ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input fields that are used to render pages which may allow cross site scripting.</p> <p>ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input fields that are used to render pages which may allow cross site scripting.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-41725 https://cve.radiocsirt.org/vuln/ghsa-697p-23gh-47wj <p>ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input fields that are used to render pages which may allow cross site scripting.</p> <p>ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input fields that are used to render pages which may allow cross site scripting.</p> https://cve.radiocsirt.org/vuln/ghsa-697p-23gh-47wj https://cve.radiocsirt.org/vuln/icsa-24-268-04 <p>A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP sub-menu can allow a remote attacker to inject arbitrary commands. A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE UTILITY sub-menu can allow a remote attacker to inject arbitrary commands. Once logged in to ProGauge MAGLINK LX4 CONSOLE, a valid user can change their privileges to administrator. The web application for ProGauge MAGLINK LX4 CONSOLE contains an administrative-level user account with a password that cannot be changed. An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by requesting the URL directly. ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input fields that are used to render pages which may allow cross site scripting.</p> <p>A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP sub-menu can allow a remote attacker to inject arbitrary commands. A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE UTILITY sub-menu can allow a remote attacker to inject arbitrary commands. Once logged in to ProGauge MAGLINK LX4 CONSOLE, a valid user can change their privileges to administrator. The web application for ProGauge MAGLINK LX4 CONSOLE contains an administrative-level user account with a password that cannot be changed. An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by requesting the URL directly. ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input fields that are used to render pages which may allow cross site scripting.</p> https://cve.radiocsirt.org/vuln/icsa-24-268-04