Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 10:21:34 +0000 CVE-2020-36905 — FIBARO System Home Center 5.021 Remote File Inclusion via Proxy API https://cve.radiocsirt.org/vuln/cve-2020-36905 <p><strong>Affected:</strong> FIBAR GROUP S.A. Home Center 3, FIBAR GROUP S.A. Home Center 2, FIBAR GROUP S.A. Home Center Lite</p> <p>FIBARO System Home Center 5.021 contains a remote file inclusion vulnerability in the undocumented proxy API that allows attackers to include arbitrary client-side scripts. Attackers can exploit the &#39;url&#39; GET parameter to inject malicious JavaScript and potentially hijack user sessions or manipulate page content.</p> <p><strong>Affected:</strong> FIBAR GROUP S.A. Home Center 3, FIBAR GROUP S.A. Home Center 2, FIBAR GROUP S.A. Home Center Lite</p> <p>FIBARO System Home Center 5.021 contains a remote file inclusion vulnerability in the undocumented proxy API that allows attackers to include arbitrary client-side scripts. Attackers can exploit the &#39;url&#39; GET parameter to inject malicious JavaScript and potentially hijack user sessions or manipulate page content.</p> https://cve.radiocsirt.org/vuln/cve-2020-36905