https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:14:55.441367+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-20868 cnvd-2018-20868 2026-10-03T01:14:55.514851+00:00 cnvd-2018-20868 https://cve.radiocsirt.org/vuln/euvd-2026-170604 EUVD-2026-170604 2026-10-03T01:14:55.514890+00:00 EUVD-2026-170604 https://cve.radiocsirt.org/vuln/fkie_cve-2018-18240 fkie_cve-2018-18240 2026-10-03T01:14:55.514906+00:00

Pippo through 1.11.0 allows remote code execution via a command to java.lang.ProcessBuilder because the XstreamEngine component does not use XStream's available protection mechanisms to restrict unmarshalling.

 https://cve.radiocsirt.org/vuln/ghsa-h892-x453-86wc GHSA-h892-x453-86wc — Pippo RCE Vulnerability 2026-10-03T01:14:55.514936+00:00

Affected: Maven: ro.pippo:pippo-core, Maven: ro.pippo:pippo-session

Pippo through 1.11.0 allows remote code execution via a command to java.lang.ProcessBuilder because the XstreamEngine component does not use XStream's available protection mechanisms to restrict unmarshalling.

 https://cve.radiocsirt.org/vuln/gsd-2018-18240 gsd-2018-18240 2026-10-03T01:14:55.514962+00:00 gsd-2018-18240