https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-26T04:36:38.654506+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-99194 EUVD-2026-99194 2026-10-26T04:36:38.657128+00:00 EUVD-2026-99194 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3453 fkie_cve-2014-3453 2026-10-26T04:36:38.657158+00:00

Eval injection vulnerability in the flag_import_form_validate function in includes/flag.export.inc in the Flag module 7.x-3.0, 7.x-3.5, and earlier for Drupal allows remote authenticated administrators to execute arbitrary PHP code via the "Flag import code" text area to admin/structure/flags/import. NOTE: this issue could also be exploited by other attackers if the administrator ignores a security warning on the permissions assignment page.

 https://cve.radiocsirt.org/vuln/ghsa-7px2-x6xv-5jgf GHSA-7px2-x6xv-5jgf 2026-10-26T04:36:38.657190+00:00

Eval injection vulnerability in the flag_import_form_validate function in includes/flag.export.inc in the Flag module 7.x-3.0, 7.x-3.5, and earlier for Drupal allows remote authenticated administrators to execute arbitrary PHP code via the "Flag import code" text area to admin/structure/flags/import. NOTE: this issue could also be exploited by other attackers if the administrator ignores a security warning on the permissions assignment page.

 https://cve.radiocsirt.org/vuln/gsd-2014-3453 gsd-2014-3453 2026-10-26T04:36:38.657209+00:00 gsd-2014-3453