https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T17:36:54.967013+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-04398 bdu:2021-04398 2026-10-06T17:36:55.040984+00:00 bdu:2021-04398 https://cve.radiocsirt.org/vuln/certfr-2017-avi-309 certfr-2017-avi-309 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Moodle</span>. Elles permettent à un attaquant… 2026-10-06T17:36:55.041021+00:00 certfr-2017-avi-309 https://cve.radiocsirt.org/vuln/cnvd-2017-12721 cnvd-2017-12721 2026-10-06T17:36:55.041041+00:00 cnvd-2017-12721 https://cve.radiocsirt.org/vuln/euvd-2026-256328 EUVD-2026-256328 2026-10-06T17:36:55.041054+00:00 EUVD-2026-256328 https://cve.radiocsirt.org/vuln/fkie_cve-2017-9841 fkie_cve-2017-9841 2026-10-06T17:36:55.041065+00:00

Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.

 https://cve.radiocsirt.org/vuln/ghsa-r7c9-c69m-rph8 GHSA-r7c9-c69m-rph8 — Code Injection in PHPUnit 2026-10-06T17:36:55.041095+00:00

Affected: Packagist: phpunit/phpunit

Util/PHP/eval-stdin.php in PHPUnit starting with 4.8.19 and before 4.8.28, as well as 5.x before 5.6.3, allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a `<?php ` substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.

 https://cve.radiocsirt.org/vuln/gsd-2017-9841 gsd-2017-9841 2026-10-06T17:36:55.041120+00:00 gsd-2017-9841 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-9841 UBUNTU-CVE-2017-9841 2026-10-06T17:36:55.041131+00:00

Affected: Ubuntu:Pro:16.04:LTS: phpunit

Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.