https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T03:46:01.377416+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-31810 cnvd-2017-31810 2026-10-22T03:46:01.459035+00:00 cnvd-2017-31810 https://cve.radiocsirt.org/vuln/euvd-2026-77916 EUVD-2026-77916 2026-10-22T03:46:01.459079+00:00 EUVD-2026-77916 https://cve.radiocsirt.org/vuln/fkie_cve-2017-14251 fkie_cve-2017-14251 2026-10-22T03:46:01.459101+00:00

Unrestricted File Upload vulnerability in the fileDenyPattern in sysext/core/Classes/Core/SystemEnvironmentBuilder.php in TYPO3 7.6.0 to 7.6.21 and 8.0.0 to 8.7.4 allows remote authenticated users to upload files with a .pht extension and consequently execute arbitrary PHP code.

 https://cve.radiocsirt.org/vuln/ghsa-fh4q-hxrw-cjqq GHSA-fh4q-hxrw-cjqq — TYPO3 Arbitrary Code Execution 2026-10-22T03:46:01.459144+00:00

Affected: Packagist: typo3/cms

Unrestricted File Upload vulnerability in the fileDenyPattern in sysext/core/Classes/Core/SystemEnvironmentBuilder.php in TYPO3 7.6.0 to 7.6.21 and 8.0.0 to 8.7.4 allows remote authenticated users to upload files with a .pht extension and consequently execute arbitrary PHP code.

 https://cve.radiocsirt.org/vuln/gsd-2017-14251 gsd-2017-14251 2026-10-22T03:46:01.459185+00:00 gsd-2017-14251