https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:42:23.749905+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-07459 bdu:2023-07459 2026-10-03T03:42:23.828260+00:00 bdu:2023-07459 https://cve.radiocsirt.org/vuln/euvd-2026-161708 EUVD-2026-161708 2026-10-03T03:42:23.828298+00:00 EUVD-2026-161708 https://cve.radiocsirt.org/vuln/fkie_cve-2023-1719 fkie_cve-2023-1719 2026-10-03T03:42:23.828313+00:00

Global variable extraction in bitrix/modules/main/tools.php in Bitrix24 22.0.300 allows unauthenticated remote attackers to (1) enumerate attachments on the server and (2) execute arbitrary JavaScript code in the victim's browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via overwriting uninitialised variables.

 https://cve.radiocsirt.org/vuln/ghsa-cvvq-2x6w-g26j GHSA-cvvq-2x6w-g26j 2026-10-03T03:42:23.828346+00:00

Global variable extraction in bitrix/modules/main/tools.php in Bitrix24 22.0.300 allows unauthenticated remote attackers to (1) enumerate attachments on the server and (2) execute arbitrary JavaScript code in the victim's browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via overwriting uninitialised variables.

 https://cve.radiocsirt.org/vuln/gsd-2023-1719 gsd-2023-1719 2026-10-03T03:42:23.828364+00:00 gsd-2023-1719