https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:11:29 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-254373 EUVD-2026-254373 https://cve.radiocsirt.org/vuln/euvd-2026-254373 https://cve.radiocsirt.org/vuln/fkie_cve-2024-5411 <p>Missing input validation and OS command integration of the input in the ORing IAP-420 web-interface allows authenticated command injection.This issue affects IAP-420 version 2.01e and below.</p> <p>Missing input validation and OS command integration of the input in the ORing IAP-420 web-interface allows authenticated command injection.This issue affects IAP-420 version 2.01e and below.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-5411 https://cve.radiocsirt.org/vuln/icsa-25-044-15 <p>A stored cross-site scripting can be triggered by placing JavaScript code into the SSID input field of the web interface. An attacker could exploit this vulnerability by luring an authenticated user to visit a malicious website. The filename parameter of a configuration file upload is prone to a command injection vulnerability. This vulnerability can only be exploited if a user is authenticated to the web interface. An attacker could invoke commands and gain full control over the device.</p> <p>A stored cross-site scripting can be triggered by placing JavaScript code into the SSID input field of the web interface. An attacker could exploit this vulnerability by luring an authenticated user to visit a malicious website. The filename parameter of a configuration file upload is prone to a command injection vulnerability. This vulnerability can only be exploited if a user is authenticated to the web interface. An attacker could invoke commands and gain full control over the device.</p> https://cve.radiocsirt.org/vuln/icsa-25-044-15