https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 17:27:51 +0000 https://cve.radiocsirt.org/vuln/cve-2025-6563 <p><strong>Affected:</strong> MikroTik RouterOS</p> <p>A cross-site scripting vulnerability is present in the hotspot of MikroTik&#39;s RouterOS on versions below 7.19.2. An attacker can inject the `javascript` protocol in the `dst` parameter. When the victim browses to the malicious URL and logs in, the XSS executes. The POST request used to login, can also be converted to a GET request, allowing an attacker to send a specifically crafted URL that automatically logs in the victim (into the attacker&#39;s account) and triggers the payload.</p> <p><strong>Affected:</strong> MikroTik RouterOS</p> <p>A cross-site scripting vulnerability is present in the hotspot of MikroTik&#39;s RouterOS on versions below 7.19.2. An attacker can inject the `javascript` protocol in the `dst` parameter. When the victim browses to the malicious URL and logs in, the XSS executes. The POST request used to login, can also be converted to a GET request, allowing an attacker to send a specifically crafted URL that automatically logs in the victim (into the attacker&#39;s account) and triggers the payload.</p> https://cve.radiocsirt.org/vuln/cve-2025-6563