https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:08:13.454639+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-00884 bdu:2026-00884 2026-10-03T14:08:13.518011+00:00 bdu:2026-00884 https://cve.radiocsirt.org/vuln/euvd-2026-227421 EUVD-2026-227421 2026-10-03T14:08:13.518051+00:00 EUVD-2026-227421 https://cve.radiocsirt.org/vuln/fkie_cve-2021-47667 fkie_cve-2021-47667 2026-10-03T14:08:13.518065+00:00

An OS command injection vulnerability in lib/NSSDropoff.php in ZendTo 5.24-3 through 6.x before 6.10-7 allows unauthenticated remote attackers to execute arbitrary commands via shell metacharacters in the tmp_name parameter when dropping off a file via a POST /dropoff request.

 https://cve.radiocsirt.org/vuln/ghsa-r4mc-p68x-wx22 GHSA-r4mc-p68x-wx22 2026-10-03T14:08:13.518095+00:00

An OS command injection vulnerability in lib/NSSDropoff.php in ZendTo 5.24-3 through 6.x before 6.10-7 allows unauthenticated remote attackers to execute arbitrary commands via shell metacharacters in the tmp_name parameter when dropping off a file via a POST /dropoff request.