https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:51:01 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-08273 bdu:2025-08273 https://cve.radiocsirt.org/vuln/bdu:2025-08273 https://cve.radiocsirt.org/vuln/euvd-2026-246385 EUVD-2026-246385 https://cve.radiocsirt.org/vuln/euvd-2026-246385 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6563 <p>A cross-site scripting vulnerability is present in the hotspot of MikroTik&#39;s RouterOS on versions below 7.19.2. An attacker can inject the `javascript` protocol in the `dst` parameter. When the victim browses to the malicious URL and logs in, the XSS executes. The POST request used to login, can also be converted to a GET request, allowing an attacker to send a specifically crafted URL that automatically logs in the victim (into the attacker&#39;s account) and triggers the payload.</p> <p>A cross-site scripting vulnerability is present in the hotspot of MikroTik&#39;s RouterOS on versions below 7.19.2. An attacker can inject the `javascript` protocol in the `dst` parameter. When the victim browses to the malicious URL and logs in, the XSS executes. The POST request used to login, can also be converted to a GET request, allowing an attacker to send a specifically crafted URL that automatically logs in the victim (into the attacker&#39;s account) and triggers the payload.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-6563 https://cve.radiocsirt.org/vuln/ghsa-gh3x-wfh2-9f86 <p>A cross-site scripting vulnerability is present in the hotspot of MikroTik&#39;s RouterOS on versions below 7.19.2. An attacker can inject the `javascript` protocol in the `dst` parameter. When the victim browses to the malicious URL and logs in, the XSS executes. The POST request used to login, can also be converted to a GET request, allowing an attacker to send a specifically crafted URL that automatically logs in the victim (into the attacker&#39;s account) and triggers the payload.</p> <p>A cross-site scripting vulnerability is present in the hotspot of MikroTik&#39;s RouterOS on versions below 7.19.2. An attacker can inject the `javascript` protocol in the `dst` parameter. When the victim browses to the malicious URL and logs in, the XSS executes. The POST request used to login, can also be converted to a GET request, allowing an attacker to send a specifically crafted URL that automatically logs in the victim (into the attacker&#39;s account) and triggers the payload.</p> https://cve.radiocsirt.org/vuln/ghsa-gh3x-wfh2-9f86