https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 06:20:23 +0000 https://cve.radiocsirt.org/vuln/cve-2025-34079 <p><strong>Affected:</strong> NSClient++</p> <p>An authenticated remote code execution vulnerability exists in NSClient++ version 0.5.2.35 when the web interface and ExternalScripts module are enabled. A remote attacker with the administrator password can authenticate to the web interface (default port 8443), inject arbitrary commands as external scripts via the /settings/query.json API, save the configuration, and trigger the script via the /query/{name} endpoint. The injected commands are executed with SYSTEM privileges, enabling full remote compromise.</p> <p>This capability is an intended feature, but the lack of safeguards or privilege separation makes it risky when exposed to untrusted actors.</p> <p><strong>Affected:</strong> NSClient++</p> <p>An authenticated remote code execution vulnerability exists in NSClient++ version 0.5.2.35 when the web interface and ExternalScripts module are enabled. A remote attacker with the administrator password can authenticate to the web interface (default port 8443), inject arbitrary commands as external scripts via the /settings/query.json API, save the configuration, and trigger the script via the /query/{name} endpoint. The injected commands are executed with SYSTEM privileges, enabling full remote compromise.</p> <p>This capability is an intended feature, but the lack of safeguards or privilege separation makes it risky when exposed to untrusted actors.</p> https://cve.radiocsirt.org/vuln/cve-2025-34079