https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T11:03:59.763464+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-159544 EUVD-2026-159544 2026-10-21T11:03:59.766269+00:00 EUVD-2026-159544 https://cve.radiocsirt.org/vuln/fkie_cve-2024-1262 fkie_cve-2024-1262 2026-10-21T11:03:59.766301+00:00

A vulnerability, which was classified as critical, has been found in Juanpao JPShop up to 1.5.02. This issue affects the function actionUpdate of the file /api/controllers/merchant/design/MaterialController.php of the component API. The manipulation of the argument pic_url leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-253001 was assigned to this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-2xhq-4fmf-r8g2 GHSA-2xhq-4fmf-r8g2 2026-10-21T11:03:59.766331+00:00

A vulnerability, which was classified as critical, has been found in Juanpao JPShop up to 1.5.02. This issue affects the function actionUpdate of the file /api/controllers/merchant/design/MaterialController.php of the component API. The manipulation of the argument pic_url leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-253001 was assigned to this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2024-1262 gsd-2024-1262 2026-10-21T11:03:59.766349+00:00 gsd-2024-1262