https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T21:17:26.709377+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-166770 EUVD-2026-166770 2026-10-02T21:17:26.712955+00:00 EUVD-2026-166770 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25299 fkie_cve-2022-25299 2026-10-02T21:17:26.712985+00:00

This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mg_http_upload() method may enable attackers to write files to arbitrary locations outside the designated target folder.

 https://cve.radiocsirt.org/vuln/ghsa-q66h-r8q8-x284 GHSA-q66h-r8q8-x284 2026-10-02T21:17:26.713015+00:00

This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mg_http_upload() method may enable attackers to write files to arbitrary locations outside the designated target folder.

 https://cve.radiocsirt.org/vuln/gsd-2022-25299 gsd-2022-25299 2026-10-02T21:17:26.713032+00:00 gsd-2022-25299 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-25299 UBUNTU-CVE-2022-25299 2026-10-02T21:17:26.713043+00:00

Affected: Ubuntu:16.04:LTS: phantomjs, Ubuntu:18.04:LTS: phantomjs, Ubuntu:20.04:LTS: phantomjs

This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mg_http_upload() method may enable attackers to write files to arbitrary locations outside the designated target folder.

 https://cve.radiocsirt.org/vuln/vde-2022-033 VDE-2022-033 — Pilz: PASvisu and PMI affected by multiple vulnerabilities 2026-10-02T21:17:26.713065+00:00

PASvisu is an HMI solution for Machine Visualization. It is available as a standalone software product, but it is also included in various models of the PMI product family. The PASvisu Server component contains multiple vulnerabilities which can be utilised to write arbitrary files, potentially leading to code execution.