EUVD-2025-204269

In WODESYS WD-R608U router also known as WDR122B V2.0 and WDR28 due to lack of validation in the langGet parameter in the adm.cgi endpoint, the malicious attacker can execute system shell commands. The vendor was notified early about this vulnerability, but didn't respond with the details of...

Cross site scripting

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2021-29808

The CVE-2021-29808 vulnerability affects IBM Tivoli Netcool/OMNIbus_GUI WebGUI (IBM Jazz for Service Management) 8.1.x, with the 8.1.0 WebGUI vulnerable to stored cross-site scripting. The issue allows an attacker to embed arbitrary JavaScript in the Web UI, potentially leading to credentials dis...