<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: zhistaredu-startraining</title><description>Every new CVE for zhistaredu-startraining.</description><link>https://agentprime.io/</link><item><title>CVE-2026-100881: zhistaredu StarTraining application.yml cross site scripting</title><link>https://agentprime.io/advisories/CVE-2026-100881/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-100881/</guid><description>CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 27 Sep 2026 21:15:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-100880: zhistaredu StarTraining Upload Endpoint MimeTypeUtils.java cross site scripting</title><link>https://agentprime.io/advisories/CVE-2026-100880/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-100880/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 27 Sep 2026 21:00:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-100879: zhistaredu StarTraining dataScope Endpoint SysRoleServiceImpl.java checkRoleAllowed authorization</title><link>https://agentprime.io/advisories/CVE-2026-100879/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-100879/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 27 Sep 2026 20:45:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-100878: zhistaredu StarTraining authRole Endpoint SysUser.java SysUser.isAdmin authorization</title><link>https://agentprime.io/advisories/CVE-2026-100878/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-100878/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 27 Sep 2026 20:30:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-97879: zhistaredu StarTraining api-docs Endpoint SecurityConfig.java missing authentication</title><link>https://agentprime.io/advisories/CVE-2026-97879/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-97879/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 25 Sep 2026 16:45:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-97878: zhistaredu StarTraining Druid Console index.html anonymous missing authentication</title><link>https://agentprime.io/advisories/CVE-2026-97878/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-97878/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 25 Sep 2026 16:30:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-97877: zhistaredu StarTraining JWT Token application.yml UserLoginService.createToken hard-coded password</title><link>https://agentprime.io/advisories/CVE-2026-97877/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-97877/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 25 Sep 2026 16:15:10 GMT</pubDate><category>CVE</category></item></channel></rss>