https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-10T15:07:44.595493+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cnvd-2015-03992 cnvd-2015-03992 2026-10-10T15:07:44.664835+00:00 cnvd-2015-03992 https://vulnerability.circl.lu/vuln/fkie_cve-2015-4679 fkie_cve-2015-4679 2026-10-10T15:07:44.664909+00:00

Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Airties RT-210 allow remote attackers to inject arbitrary web script or HTML via the (1) ddns_domainame or (2) ddns_account parameter to ddns.stm.

 https://vulnerability.circl.lu/vuln/ghsa-mcwr-pm7p-wjxf GHSA-mcwr-pm7p-wjxf 2026-10-10T15:07:44.664969+00:00

Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Airties RT-210 allow remote attackers to inject arbitrary web script or HTML via the (1) ddns_domainame or (2) ddns_account parameter to ddns.stm.

 https://vulnerability.circl.lu/vuln/gsd-2015-4679 gsd-2015-4679 2026-10-10T15:07:44.665002+00:00 gsd-2015-4679 https://vulnerability.circl.lu/vuln/var-201506-0178 VAR-201506-0178 2026-10-10T15:07:44.665023+00:00

Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Airties RT-210 allow remote attackers to inject arbitrary web script or HTML via the (1) ddns_domainame or (2) ddns_account parameter to ddns.stm. Airties RT-210 is a Turkish router product. User session. Airties RT-210 is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks. The vulnerability stems from the fact that the ddns.stm file does not adequately filter the 'ddns_domainname' and 'ddns_account' parameters