https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T13:57:08.555318+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-11252 cnvd-2018-11252 2026-10-28T13:57:08.629471+00:00 cnvd-2018-11252 https://cve.radiocsirt.org/vuln/euvd-2026-79575 EUVD-2026-79575 2026-10-28T13:57:08.629512+00:00 EUVD-2026-79575 https://cve.radiocsirt.org/vuln/fkie_cve-2017-17520 fkie_cve-2017-17520 2026-10-28T13:57:08.629527+00:00

tools/url_handler.pl in TIN 2.4.1 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a third party has reported that this is intentional behavior, because the documentation states "url_handler.pl was designed to work together with tin which only issues shell escaped absolute URLs.

 https://cve.radiocsirt.org/vuln/ghsa-569q-x9r8-48cw GHSA-569q-x9r8-48cw 2026-10-28T13:57:08.629559+00:00

** DISPUTED ** tools/url_handler.pl in TIN 2.4.1 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a third party has reported that this is intentional behavior, because the documentation states "url_handler.pl was designed to work together with tin which only issues shell escaped absolute URLs."

 https://cve.radiocsirt.org/vuln/gsd-2017-17520 gsd-2017-17520 2026-10-28T13:57:08.629578+00:00 gsd-2017-17520