https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T20:47:11.276527+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-127080 EUVD-2026-127080 2026-10-09T20:47:11.279105+00:00 EUVD-2026-127080 https://cve.radiocsirt.org/vuln/fkie_cve-2008-1866 fkie_cve-2008-1866 2026-10-09T20:47:11.279136+00:00

admin/modif_config.php in Blog Pixel Motion (aka PixelMotion) does not require admin authentication, which allows remote authenticated users to upload arbitrary PHP scripts in a ZIP archive, which is written to templateZip/ and then automatically extracted under templates/ for execution via a direct request.

 https://cve.radiocsirt.org/vuln/ghsa-j5c8-2583-mcmc GHSA-j5c8-2583-mcmc 2026-10-09T20:47:11.279167+00:00

admin/modif_config.php in Blog Pixel Motion (aka PixelMotion) does not require admin authentication, which allows remote authenticated users to upload arbitrary PHP scripts in a ZIP archive, which is written to templateZip/ and then automatically extracted under templates/ for execution via a direct request.

 https://cve.radiocsirt.org/vuln/gsd-2008-1866 gsd-2008-1866 2026-10-09T20:47:11.279183+00:00 gsd-2008-1866