https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T16:21:05.764850+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-25797 cnvd-2018-25797 2026-10-27T16:21:05.832546+00:00 cnvd-2018-25797 https://cve.radiocsirt.org/vuln/euvd-2026-63525 EUVD-2026-63525 2026-10-27T16:21:05.832583+00:00 EUVD-2026-63525 https://cve.radiocsirt.org/vuln/fkie_cve-2018-8033 fkie_cve-2018-8033 2026-10-27T16:21:05.832597+00:00

In Apache OFBiz 16.11.01 to 16.11.04, the OFBiz HTTP engine (org.apache.ofbiz.service.engine.HttpEngine.java) handles requests for HTTP services via the /webtools/control/httpService endpoint. Both POST and GET requests to the httpService endpoint may contain three parameters: serviceName, serviceMode, and serviceContext. The exploitation occurs by having DOCTYPEs pointing to external references that trigger a payload that returns secret information from the host.

 https://cve.radiocsirt.org/vuln/ghsa-2v2f-rp8w-vrxh GHSA-2v2f-rp8w-vrxh 2026-10-27T16:21:05.832628+00:00

In Apache OFBiz 16.11.01 to 16.11.04, the OFBiz HTTP engine (org.apache.ofbiz.service.engine.HttpEngine.java) handles requests for HTTP services via the /webtools/control/httpService endpoint. Both POST and GET requests to the httpService endpoint may contain three parameters: serviceName, serviceMode, and serviceContext. The exploitation occurs by having DOCTYPEs pointing to external references that trigger a payload that returns secret information from the host.

 https://cve.radiocsirt.org/vuln/gsd-2018-8033 gsd-2018-8033 2026-10-27T16:21:05.832645+00:00 gsd-2018-8033