https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T18:14:50.209169+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-107973 EUVD-2026-107973 2026-10-18T18:14:50.214515+00:00 EUVD-2026-107973 https://cve.radiocsirt.org/vuln/fkie_cve-2013-5350 fkie_cve-2013-5350 2026-10-18T18:14:50.214553+00:00

The "Remember me" feature in the opSecurityUser::getRememberLoginCookie function in lib/user/opSecurityUser.class.php in OpenPNE 3.6.13 before 3.6.13.1 and 3.8.9 before 3.8.9.1 does not properly validate login data in HTTP Cookie headers, which allows remote attackers to conduct PHP object injection attacks, and execute arbitrary PHP code, via a crafted serialized object.

 https://cve.radiocsirt.org/vuln/ghsa-c26j-j6q7-r2mc GHSA-c26j-j6q7-r2mc 2026-10-18T18:14:50.214587+00:00

The "Remember me" feature in the opSecurityUser::getRememberLoginCookie function in lib/user/opSecurityUser.class.php in OpenPNE 3.6.13 before 3.6.13.1 and 3.8.9 before 3.8.9.1 does not properly validate login data in HTTP Cookie headers, which allows remote attackers to conduct PHP object injection attacks, and execute arbitrary PHP code, via a crafted serialized object.

 https://cve.radiocsirt.org/vuln/gsd-2013-5350 gsd-2013-5350 2026-10-18T18:14:50.214605+00:00 gsd-2013-5350 https://cve.radiocsirt.org/vuln/jvndb-2014-000009 jvndb-2014-000009 2026-10-18T18:14:50.214617+00:00

OpenPNE contains an issue in processing Cookie headers, which may result in a PHP Object Injection vulnerability. Egidio Romano of Secunia reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.