https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T21:26:02.851904+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-06601 cnvd-2019-06601 2026-10-04T21:26:02.926145+00:00 cnvd-2019-06601 https://cve.radiocsirt.org/vuln/euvd-2026-52677 EUVD-2026-52677 2026-10-04T21:26:02.926201+00:00 EUVD-2026-52677 https://cve.radiocsirt.org/vuln/fkie_cve-2019-9185 fkie_cve-2019-9185 2026-10-04T21:26:02.926218+00:00

Controller/Async/FilesystemManager.php in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitrary PHP code by renaming a previously uploaded file to have a .php extension.

 https://cve.radiocsirt.org/vuln/ghsa-gmg5-f2gm-p3h7 GHSA-gmg5-f2gm-p3h7 — Bolt Unrestricted Upload of File with Dangerous Type 2026-10-04T21:26:02.926268+00:00

Affected: Packagist: bolt/bolt

`Controller/Async/FilesystemManager.php` in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitrary PHP code by renaming a previously uploaded file to have a `.php` extension.

 https://cve.radiocsirt.org/vuln/gsd-2019-9185 gsd-2019-9185 2026-10-04T21:26:02.926305+00:00 gsd-2019-9185 https://cve.radiocsirt.org/vuln/msrc_cve-2019-9185 msrc_CVE-2019-9185 — Controller/Async/FilesystemManager.php in the filemanager in Bolt allows remote attacke 2026-10-04T21:26:02.926318+00:00 msrc_CVE-2019-9185