https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:48:42 +0000 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0793 certfr-2023-avi-0793 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0793 https://cve.radiocsirt.org/vuln/euvd-2026-204753 EUVD-2026-204753 https://cve.radiocsirt.org/vuln/euvd-2026-204753 https://cve.radiocsirt.org/vuln/fkie_cve-2022-27665 <p>Reflected XSS (via AngularJS sandbox escape expressions) exists in Progress Ipswitch WS_FTP Server 8.6.0. This can lead to execution of malicious code and commands on the client due to improper handling of user-provided input. By inputting malicious payloads in the subdirectory searchbar or Add folder filename boxes, it is possible to execute client-side commands. For example, there is Client-Side Template Injection via subFolderPath to the ThinClient/WtmApiService.asmx/GetFileSubTree URI.</p> <p>Reflected XSS (via AngularJS sandbox escape expressions) exists in Progress Ipswitch WS_FTP Server 8.6.0. This can lead to execution of malicious code and commands on the client due to improper handling of user-provided input. By inputting malicious payloads in the subdirectory searchbar or Add folder filename boxes, it is possible to execute client-side commands. For example, there is Client-Side Template Injection via subFolderPath to the ThinClient/WtmApiService.asmx/GetFileSubTree URI.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-27665 https://cve.radiocsirt.org/vuln/ghsa-prxf-5xrr-96cp <p>Reflected XSS (via AngularJS sandbox escape expressions) exists in Progress Ipswitch WS_FTP Server 8.6.0. This can lead to execution of malicious code and commands on the client due to improper handling of user-provided input. By inputting malicious payloads in the subdirectory searchbar or Add folder filename boxes, it is possible to execute client-side commands. For example, there is Client-Side Template Injection via subFolderPath to the ThinClient/WtmApiService.asmx/GetFileSubTree URI.</p> <p>Reflected XSS (via AngularJS sandbox escape expressions) exists in Progress Ipswitch WS_FTP Server 8.6.0. This can lead to execution of malicious code and commands on the client due to improper handling of user-provided input. By inputting malicious payloads in the subdirectory searchbar or Add folder filename boxes, it is possible to execute client-side commands. For example, there is Client-Side Template Injection via subFolderPath to the ThinClient/WtmApiService.asmx/GetFileSubTree URI.</p> https://cve.radiocsirt.org/vuln/ghsa-prxf-5xrr-96cp https://cve.radiocsirt.org/vuln/gsd-2022-27665 gsd-2022-27665 https://cve.radiocsirt.org/vuln/gsd-2022-27665 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12410-1 <p>dex-oidc-2.35.3-1.1 on GA media</p> <p>dex-oidc-2.35.3-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12410-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0832 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Ipswitch WS_FTP Server ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Ipswitch WS_FTP Server ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0832