https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:13:05.122272+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-138075 EUVD-2026-138075 2026-10-02T17:13:05.190538+00:00 EUVD-2026-138075 https://cve.radiocsirt.org/vuln/fkie_cve-2007-6405 fkie_cve-2007-6405 2026-10-02T17:13:05.190576+00:00

Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote attackers to download arbitrary CGI programs or scripts via a URI with an appended (1) '+' character, (2) '.' character, (3) %2e sequence (hex-encoded dot), or (4) hex-encoded character greater than 0x7f. NOTE: the %20 vector is already covered by CVE-2007-3407.

 https://cve.radiocsirt.org/vuln/ghsa-x4gq-m5g6-gq3v GHSA-x4gq-m5g6-gq3v 2026-10-02T17:13:05.190611+00:00

Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote attackers to download arbitrary CGI programs or scripts via a URI with an appended (1) '+' character, (2) '.' character, (3) %2e sequence (hex-encoded dot), or (4) hex-encoded character greater than 0x7f. NOTE: the %20 vector is already covered by CVE-2007-3407.

 https://cve.radiocsirt.org/vuln/gsd-2007-6405 gsd-2007-6405 2026-10-02T17:13:05.190629+00:00 gsd-2007-6405