https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:30:27 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0218 certfr-2026-avi-0218 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0218 https://cve.radiocsirt.org/vuln/cleanstart-2026-al62330 <p><strong>Affected:</strong> CleanStart: apicurio-registry, CleanStart: incubator-kie-kogito-data-index-ephemeral, CleanStart: keycloak, CleanStart: kogito-apps</p> <p>CVE-2025-11966 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: apicurio-registry, CleanStart: incubator-kie-kogito-data-index-ephemeral, CleanStart: keycloak, CleanStart: kogito-apps</p> <p>CVE-2025-11966 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-al62330 https://cve.radiocsirt.org/vuln/euvd-2026-256607 EUVD-2026-256607 https://cve.radiocsirt.org/vuln/euvd-2026-256607 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11966 <p>In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], when &#34;directory listing&#34; is enabled, file and directory names are inserted into generated HTML without proper escaping in the href, title, and link attributes. An attacker who can create or rename files or directories within a served path can craft filenames containing malicious script or HTML content, leading to stored cross-site scripting (XSS) that executes in the context of users viewing the affected directory listing.</p> <p>In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], when &#34;directory listing&#34; is enabled, file and directory names are inserted into generated HTML without proper escaping in the href, title, and link attributes. An attacker who can create or rename files or directories within a served path can craft filenames containing malicious script or HTML content, leading to stored cross-site scripting (XSS) that executes in the context of users viewing the affected directory listing.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-11966 https://cve.radiocsirt.org/vuln/ghsa-45p5-v273-3qqr <p><strong>Affected:</strong> Maven: io.vertx:vertx-web</p> <p># Description</p> <p>- In the `StaticHandlerImpl#sendDirectoryListing(...)` method under the `text/html` branch, file and directory names are directly embedded into the `href`, `title`, and link text without proper HTML escaping. - As a result, in environments where an attacker can control file names, injecting HTML/JavaScript is possible. Simply accessing the directory listing page will trigger an XSS. - Affected Code: - File: `vertx-web/src/main/java/io/vertx/ext/web/handler/impl/StaticHandlerImpl.java` - Lines: - 709–713: `normalizedDir` is constructed without escaping - 714–731: `&lt;li&gt;&lt;a ...&gt;` elements insert file names directly into attributes and body without escaping - 744: parent directory name construction - 746–751: `{directory}`, `{parent}`, and `{files}` are inserted into the HTML template without escaping</p> <p># Reproduction Steps</p> <p>1. Prerequisites: - Directory listing is enabled using `StaticHandler` (e.g., `StaticHandler.create(&#34;public&#34;).setDirectoryListing(true)`) - The attacker has the ability to create arbitrary file names under a public directory (e.g., via upload functionality or a shared directory)</p> <p>2. Create a malicious file name (example for Unix-based OS): - Create an empty file in `public/` with one of the following names: - `&lt;img src=x onerror=alert(&#39;XSS&#39;)&gt;.txt` - Or attribute injection: `evil&#34; onmouseover=&#34;alert(&#39;XSS&#39;)&#34;.txt` - Example: ```bash mkdir -p public printf…</p> <p><strong>Affected:</strong> Maven: io.vertx:vertx-web</p> <p># Description</p> <p>- In the `StaticHandlerImpl#sendDirectoryListing(...)` method under the `text/html` branch, file and directory names are directly embedded into the `href`, `title`, and link text without proper HTML escaping. - As a result, in environments where an attacker can control file names, injecting HTML/JavaScript is possible. Simply accessing the directory listing page will trigger an XSS. - Affected Code: - File: `vertx-web/src/main/java/io/vertx/ext/web/handler/impl/StaticHandlerImpl.java` - Lines: - 709–713: `normalizedDir` is constructed without escaping - 714–731: `&lt;li&gt;&lt;a ...&gt;` elements insert file names directly into attributes and body without escaping - 744: parent directory name construction - 746–751: `{directory}`, `{parent}`, and `{files}` are inserted into the HTML template without escaping</p> <p># Reproduction Steps</p> <p>1. Prerequisites: - Directory listing is enabled using `StaticHandler` (e.g., `StaticHandler.create(&#34;public&#34;).setDirectoryListing(true)`) - The attacker has the ability to create arbitrary file names under a public directory (e.g., via upload functionality or a shared directory)</p> <p>2. Create a malicious file name (example for Unix-based OS): - Create an empty file in `public/` with one of the following names: - `&lt;img src=x onerror=alert(&#39;XSS&#39;)&gt;.txt` - Or attribute injection: `evil&#34; onmouseover=&#34;alert(&#39;XSS&#39;)&#34;.txt` - Example: ```bash mkdir -p public printf…</p> https://cve.radiocsirt.org/vuln/ghsa-45p5-v273-3qqr https://cve.radiocsirt.org/vuln/rhsa-2025:23417 <p>kafka: Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout io.vertx/vertx-core: Eclipse Vert.x Access Control Flaw io.vertx/vertx-web: Eclipse Vert.x cross site scripting org.apache.kafka: Kafka Client Arbitrary File Read SSRF apache-kafka: Apache Kafka: Possible RCE attack via SASL JAAS LdapLoginModule configuration org.apache.kafka: Kafka JNDI Login Module RCE Vulnerability commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang io.quarkus/quarkus-vertx: Quarkus potential data leak netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions netty-codec: netty-codec-compression: Netty&#39;s BrotliDecoder is vulnerable to DoS via zip bomb style attack</p> <p>kafka: Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout io.vertx/vertx-core: Eclipse Vert.x Access Control Flaw io.vertx/vertx-web: Eclipse Vert.x cross site scripting org.apache.kafka: Kafka Client Arbitrary File Read SSRF apache-kafka: Apache Kafka: Possible RCE attack via SASL JAAS LdapLoginModule configuration org.apache.kafka: Kafka JNDI Login Module RCE Vulnerability commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang io.quarkus/quarkus-vertx: Quarkus potential data leak netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions netty-codec: netty-codec-compression: Netty&#39;s BrotliDecoder is vulnerable to DoS via zip bomb style attack</p> https://cve.radiocsirt.org/vuln/rhsa-2025:23417 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0019 <p>Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0019