https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T18:35:15.562777+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-128604 EUVD-2026-128604 2026-10-17T18:35:15.565697+00:00 EUVD-2026-128604 https://cve.radiocsirt.org/vuln/fkie_cve-2008-3509 fkie_cve-2008-3509 2026-10-17T18:35:15.565732+00:00

LoveCMS 1.6.2 does not require administrative authentication for (1) addblock.php, (2) blocks.php, and (3) themes.php in system/admin/, which allows remote attackers to change the configuration or execute arbitrary PHP code via addition of blocks, and other vectors.

 https://cve.radiocsirt.org/vuln/ghsa-q6c8-7rvq-2f39 GHSA-q6c8-7rvq-2f39 2026-10-17T18:35:15.565763+00:00

LoveCMS 1.6.2 does not require administrative authentication for (1) addblock.php, (2) blocks.php, and (3) themes.php in system/admin/, which allows remote attackers to change the configuration or execute arbitrary PHP code via addition of blocks, and other vectors.

 https://cve.radiocsirt.org/vuln/gsd-2008-3509 gsd-2008-3509 2026-10-17T18:35:15.565780+00:00 gsd-2008-3509