https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:52:58.637090+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-128891 EUVD-2026-128891 2026-10-02T16:52:58.639978+00:00 EUVD-2026-128891 https://cve.radiocsirt.org/vuln/fkie_cve-2008-3851 fkie_cve-2008-3851 2026-10-02T16:52:58.640008+00:00

Multiple directory traversal vulnerabilities in Pluck CMS 4.5.2 on Windows allow remote attackers to include and execute arbitrary local files via a ..\ (dot dot backslash) in the (1) blogpost, (2) cat, and (3) file parameters to data/inc/themes/predefined_variables.php, as reachable through index.php; and the (4) blogpost and (5) cat parameters to data/inc/blog_include_react.php, as reachable through index.php. NOTE: the issue involving vectors 1 through 3 reportedly exists because of an incomplete fix for CVE-2008-3194.

 https://cve.radiocsirt.org/vuln/ghsa-g567-gmj2-gq25 GHSA-g567-gmj2-gq25 2026-10-02T16:52:58.640038+00:00

Multiple directory traversal vulnerabilities in Pluck CMS 4.5.2 on Windows allow remote attackers to include and execute arbitrary local files via a ..\ (dot dot backslash) in the (1) blogpost, (2) cat, and (3) file parameters to data/inc/themes/predefined_variables.php, as reachable through index.php; and the (4) blogpost and (5) cat parameters to data/inc/blog_include_react.php, as reachable through index.php. NOTE: the issue involving vectors 1 through 3 reportedly exists because of an incomplete fix for CVE-2008-3194.

 https://cve.radiocsirt.org/vuln/gsd-2008-3851 gsd-2008-3851 2026-10-02T16:52:58.640057+00:00 gsd-2008-3851