https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T21:15:21.540800+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-59394 EUVD-2026-59394 2026-10-09T21:15:21.543623+00:00 EUVD-2026-59394 https://cve.radiocsirt.org/vuln/fkie_cve-2019-19576 fkie_cve-2019-19576 2026-10-09T21:15:21.543655+00:00

class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions.

 https://cve.radiocsirt.org/vuln/ghsa-r5gm-4p5w-pq2p GHSA-r5gm-4p5w-pq2p — Remote code execution in verot/class.upload.php 2026-10-09T21:15:21.543686+00:00

Affected: Packagist: verot/class.upload.php

class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions.

 https://cve.radiocsirt.org/vuln/gsd-2019-19576 gsd-2019-19576 2026-10-09T21:15:21.543712+00:00 gsd-2019-19576