https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 21:56:08 +0000 https://cve.radiocsirt.org/vuln/cnvd-2023-40605 cnvd-2023-40605 https://cve.radiocsirt.org/vuln/cnvd-2023-40605 https://cve.radiocsirt.org/vuln/euvd-2026-229867 EUVD-2026-229867 https://cve.radiocsirt.org/vuln/euvd-2026-229867 https://cve.radiocsirt.org/vuln/fkie_cve-2022-44567 <p>A command injection vulnerability exists in Rocket.Chat-Desktop &lt;3.8.14 that could allow an attacker to pass a malicious url of openInternalVideoChatWindow to shell.openExternal(), which may lead to remote code execution (internalVideoChatWindow.ts#L17). To exploit the vulnerability, the internal video chat window must be disabled or a Mac App Store build must be used (internalVideoChatWindow.ts#L14). The vulnerability may be exploited by an XSS attack because the function openInternalVideoChatWindow is exposed in the Rocket.Chat-Desktop-API.</p> <p>A command injection vulnerability exists in Rocket.Chat-Desktop &lt;3.8.14 that could allow an attacker to pass a malicious url of openInternalVideoChatWindow to shell.openExternal(), which may lead to remote code execution (internalVideoChatWindow.ts#L17). To exploit the vulnerability, the internal video chat window must be disabled or a Mac App Store build must be used (internalVideoChatWindow.ts#L14). The vulnerability may be exploited by an XSS attack because the function openInternalVideoChatWindow is exposed in the Rocket.Chat-Desktop-API.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-44567 https://cve.radiocsirt.org/vuln/ghsa-5h9c-fgj7-7ww4 <p>A command injection vulnerability exists in Rocket.Chat-Desktop &lt;3.8.14 that could allow an attacker to pass a malicious url of openInternalVideoChatWindow to shell.openExternal(), which may lead to remote code execution (internalVideoChatWindow.ts#L17). To exploit the vulnerability, the internal video chat window must be disabled or a Mac App Store build must be used (internalVideoChatWindow.ts#L14). The vulnerability may be exploited by an XSS attack because the function openInternalVideoChatWindow is exposed in the Rocket.Chat-Desktop-API.</p> <p>A command injection vulnerability exists in Rocket.Chat-Desktop &lt;3.8.14 that could allow an attacker to pass a malicious url of openInternalVideoChatWindow to shell.openExternal(), which may lead to remote code execution (internalVideoChatWindow.ts#L17). To exploit the vulnerability, the internal video chat window must be disabled or a Mac App Store build must be used (internalVideoChatWindow.ts#L14). The vulnerability may be exploited by an XSS attack because the function openInternalVideoChatWindow is exposed in the Rocket.Chat-Desktop-API.</p> https://cve.radiocsirt.org/vuln/ghsa-5h9c-fgj7-7ww4 https://cve.radiocsirt.org/vuln/gsd-2022-44567 gsd-2022-44567 https://cve.radiocsirt.org/vuln/gsd-2022-44567