https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T21:53:51.775419+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-19402 cnvd-2018-19402 2026-10-12T21:53:51.780477+00:00 cnvd-2018-19402 https://cve.radiocsirt.org/vuln/euvd-2026-68575 EUVD-2026-68575 2026-10-12T21:53:51.780507+00:00 EUVD-2026-68575 https://cve.radiocsirt.org/vuln/fkie_cve-2018-17139 fkie_cve-2018-17139 2026-10-12T21:53:51.780521+00:00

UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with the image/jpeg content type.

 https://cve.radiocsirt.org/vuln/ghsa-9x5j-whx3-gg57 GHSA-9x5j-whx3-gg57 2026-10-12T21:53:51.780548+00:00

UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with the image/jpeg content type.

 https://cve.radiocsirt.org/vuln/gsd-2018-17139 gsd-2018-17139 2026-10-12T21:53:51.780564+00:00 gsd-2018-17139