https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 22:56:00 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-194196 EUVD-2026-194196 https://cve.radiocsirt.org/vuln/euvd-2026-194196 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3260 <p>The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. An authenticated malicious agent can exploit this vulnerability to execute arbitrary command on the underlying Linux operating system.</p> <p>The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. An authenticated malicious agent can exploit this vulnerability to execute arbitrary command on the underlying Linux operating system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-3260 https://cve.radiocsirt.org/vuln/ghsa-xrfp-wpx5-pg4h <p>When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field. The username is passed without sanitization into CMD running as NT/Authority System. An authenticated attacker can leverage this vulnerability to execute arbitrary code with system-level access to the CyberPower PowerPanel Enterprise server.</p> <p>When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field. The username is passed without sanitization into CMD running as NT/Authority System. An authenticated attacker can leverage this vulnerability to execute arbitrary code with system-level access to the CyberPower PowerPanel Enterprise server.</p> https://cve.radiocsirt.org/vuln/ghsa-xrfp-wpx5-pg4h https://cve.radiocsirt.org/vuln/gsd-2023-3260 gsd-2023-3260 https://cve.radiocsirt.org/vuln/gsd-2023-3260