https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 05:29:52 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-08053 bdu:2025-08053 https://cve.radiocsirt.org/vuln/bdu:2025-08053 https://cve.radiocsirt.org/vuln/euvd-2026-281004 EUVD-2026-281004 https://cve.radiocsirt.org/vuln/euvd-2026-281004 https://cve.radiocsirt.org/vuln/fkie_cve-2025-34079 <p>An authenticated remote code execution vulnerability exists in NSClient++ version 0.5.2.35 when the web interface and ExternalScripts module are enabled. A remote attacker with the administrator password can authenticate to the web interface (default port 8443), inject arbitrary commands as external scripts via the /settings/query.json API, save the configuration, and trigger the script via the /query/{name} endpoint. The injected commands are executed with SYSTEM privileges, enabling full remote compromise.</p> <p>This capability is an intended feature, but the lack of safeguards or privilege separation makes it risky when exposed to untrusted actors.</p> <p>An authenticated remote code execution vulnerability exists in NSClient++ version 0.5.2.35 when the web interface and ExternalScripts module are enabled. A remote attacker with the administrator password can authenticate to the web interface (default port 8443), inject arbitrary commands as external scripts via the /settings/query.json API, save the configuration, and trigger the script via the /query/{name} endpoint. The injected commands are executed with SYSTEM privileges, enabling full remote compromise.</p> <p>This capability is an intended feature, but the lack of safeguards or privilege separation makes it risky when exposed to untrusted actors.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-34079 https://cve.radiocsirt.org/vuln/ghsa-rhrw-79v5-jc5x <p>An authenticated remote code execution vulnerability exists in NSClient++ version 0.5.2.35 when the web interface and ExternalScripts module are enabled. A remote attacker with the administrator password can authenticate to the web interface (default port 8443), inject arbitrary commands as external scripts via the /settings/query.json API, save the configuration, and trigger the script via the /query/{name} endpoint. The injected commands are executed with SYSTEM privileges, enabling full remote compromise.</p> <p>This capability is an intended feature, but the lack of safeguards or privilege separation makes it risky when exposed to untrusted actors.</p> <p>An authenticated remote code execution vulnerability exists in NSClient++ version 0.5.2.35 when the web interface and ExternalScripts module are enabled. A remote attacker with the administrator password can authenticate to the web interface (default port 8443), inject arbitrary commands as external scripts via the /settings/query.json API, save the configuration, and trigger the script via the /query/{name} endpoint. The injected commands are executed with SYSTEM privileges, enabling full remote compromise.</p> <p>This capability is an intended feature, but the lack of safeguards or privilege separation makes it risky when exposed to untrusted actors.</p> https://cve.radiocsirt.org/vuln/ghsa-rhrw-79v5-jc5x