https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 21:53:32 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-357428 EUVD-2026-357428 https://cve.radiocsirt.org/vuln/euvd-2026-357428 https://cve.radiocsirt.org/vuln/fkie_cve-2026-75933 <p>Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page&#39;s scripts and styles option. Injected script is executed in the context of any visiting user&#39;s domain.</p> <p>Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page&#39;s scripts and styles option. Injected script is executed in the context of any visiting user&#39;s domain.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-75933 https://cve.radiocsirt.org/vuln/ghsa-qh39-pj9p-f8w7 <p>Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page&#39;s scripts and styles option. Injected script is executed in the context of any visiting user&#39;s domain.</p> <p>Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page&#39;s scripts and styles option. Injected script is executed in the context of any visiting user&#39;s domain.</p> https://cve.radiocsirt.org/vuln/ghsa-qh39-pj9p-f8w7 https://cve.radiocsirt.org/vuln/va-26-232-02 <p>Jet Admin allows an attacker to create a malicious app and connect it to a target user&#39;s custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected to the target domain, the attacker&#39;s workspace is populated with the victim&#39;s OAuth Client ID and Client Secret if the victim is using an OAuth provider. Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page&#39;s scripts and styles option. Injected script is executed in the context of any visiting user&#39;s domain.</p> <p>Jet Admin allows an attacker to create a malicious app and connect it to a target user&#39;s custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected to the target domain, the attacker&#39;s workspace is populated with the victim&#39;s OAuth Client ID and Client Secret if the victim is using an OAuth provider. Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page&#39;s scripts and styles option. Injected script is executed in the context of any visiting user&#39;s domain.</p> https://cve.radiocsirt.org/vuln/va-26-232-02