This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-104656 | BDVDB-2026-401055 Detail

Progress SoftwareProgress® Telerik® Fiddler® Everywhere

Description#

Improper neutralization of input in the sessions grid in Progress Telerik Fiddler Everywhere 8.3.0 and earlier allows an attacker to execute backend IPC commands by convincing a user to open a specially crafted SAZ file.

Impact#

An attacker can execute backend IPC commands by convincing a user to open a specially crafted SAZ file containing a cross-site scripting payload in a session URL.

Weaknesses#

  • CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.