https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 10:29:19 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-29256 EUVD-2026-29256 https://cve.radiocsirt.org/vuln/euvd-2026-29256 https://cve.radiocsirt.org/vuln/fkie_cve-2021-35489 <p>Thruk 2.40-2 allows /thruk/#cgi-bin/extinfo.cgi?type=2&amp;host={HOSTNAME]&amp;service={SERVICENAME]&amp;backend={BACKEND] Reflected XSS via the host or service parameter. An attacker could inject arbitrary JavaScript into extinfo.cgi. The malicious payload would be triggered every time an authenticated user browses the page containing it.</p> <p>Thruk 2.40-2 allows /thruk/#cgi-bin/extinfo.cgi?type=2&amp;host={HOSTNAME]&amp;service={SERVICENAME]&amp;backend={BACKEND] Reflected XSS via the host or service parameter. An attacker could inject arbitrary JavaScript into extinfo.cgi. The malicious payload would be triggered every time an authenticated user browses the page containing it.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-35489 https://cve.radiocsirt.org/vuln/ghsa-6642-wv2w-7c29 <p>Thruk 2.40-2 allows /thruk/#cgi-bin/extinfo.cgi?type=2&amp;host={HOSTNAME]&amp;service={SERVICENAME]&amp;backend={BACKEND] Reflected XSS via the host or service parameter. An attacker could inject arbitrary JavaScript into extinfo.cgi. The malicious payload would be triggered every time an authenticated user browses the page containing it.</p> <p>Thruk 2.40-2 allows /thruk/#cgi-bin/extinfo.cgi?type=2&amp;host={HOSTNAME]&amp;service={SERVICENAME]&amp;backend={BACKEND] Reflected XSS via the host or service parameter. An attacker could inject arbitrary JavaScript into extinfo.cgi. The malicious payload would be triggered every time an authenticated user browses the page containing it.</p> https://cve.radiocsirt.org/vuln/ghsa-6642-wv2w-7c29 https://cve.radiocsirt.org/vuln/gsd-2021-35489 gsd-2021-35489 https://cve.radiocsirt.org/vuln/gsd-2021-35489