https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T07:40:11.351399+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-136912 EUVD-2026-136912 2026-10-05T07:40:11.354572+00:00 EUVD-2026-136912 https://cve.radiocsirt.org/vuln/fkie_cve-2007-5109 fkie_cve-2007-5109 2026-10-05T07:40:11.354602+00:00

Cross-site request forgery (CSRF) vulnerability in index.php in FlatNuke 2.6, and possibly 3, allows remote attackers to change the password and privilege level of arbitrary accounts via the user parameter and modified (1) regpass and (2) level parameters in a none_Login action, as demonstrated by using a Flash object to automatically make the request.

 https://cve.radiocsirt.org/vuln/ghsa-j47m-m564-x4jv GHSA-j47m-m564-x4jv 2026-10-05T07:40:11.354633+00:00

Cross-site request forgery (CSRF) vulnerability in index.php in FlatNuke 2.6, and possibly 3, allows remote attackers to change the password and privilege level of arbitrary accounts via the user parameter and modified (1) regpass and (2) level parameters in a none_Login action, as demonstrated by using a Flash object to automatically make the request.

 https://cve.radiocsirt.org/vuln/gsd-2007-5109 gsd-2007-5109 2026-10-05T07:40:11.354650+00:00 gsd-2007-5109 https://cve.radiocsirt.org/vuln/ubuntu-cve-2007-5109 UBUNTU-CVE-2007-5109 2026-10-05T07:40:11.354661+00:00

Affected: Ubuntu:16.04:LTS: flatnuke, Ubuntu:18.04:LTS: flatnuke, Ubuntu:20.04:LTS: flatnuke, Ubuntu:22.04:LTS: flatnuke, Ubuntu:24.04:LTS: flatnuke, Ubuntu:25.10: flatnuke, Ubuntu:26.04:LTS: flatnuke

Cross-site request forgery (CSRF) vulnerability in index.php in FlatNuke 2.6, and possibly 3, allows remote attackers to change the password and privilege level of arbitrary accounts via the user parameter and modified (1) regpass and (2) level parameters in a none_Login action, as demonstrated by using a Flash object to automatically make the request.