https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:23:48.274718+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-05512 bdu:2024-05512 2026-10-02T16:23:48.282116+00:00 bdu:2024-05512 https://cve.radiocsirt.org/vuln/bell-cve-2024-5585 Withdrawn: BELL-CVE-2024-5585 — CVE-2024-5585 does not affect BellSoft software 2026-10-02T16:23:48.282150+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-libphp-2024-5585 BIT-libphp-2024-5585 — Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix) 2026-10-02T16:23:48.282169+00:00

Affected: Bitnami: libphp

In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spaces. Original issue: when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0468 certfr-2024-avi-0468 — De multiples vulnérabilités ont été découvertes dans PHP. Certaines d'entre elles permettent à un attaquant de provoque… 2026-10-02T16:23:48.282198+00:00 certfr-2024-avi-0468 https://cve.radiocsirt.org/vuln/euvd-2026-217490 EUVD-2026-217490 2026-10-02T16:23:48.282214+00:00 EUVD-2026-217490 https://cve.radiocsirt.org/vuln/fkie_cve-2024-5585 fkie_cve-2024-5585 2026-10-02T16:23:48.282224+00:00

In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spaces. Original issue: when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell.

 https://cve.radiocsirt.org/vuln/msrc_cve-2024-5585 msrc_CVE-2024-5585 — Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix) 2026-10-02T16:23:48.282245+00:00 msrc_CVE-2024-5585 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1320 WID-SEC-W-2024-1320 — PHP: Mehrere Schwachstellen 2026-10-02T16:23:48.282260+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um beliebigen Programmcode auszuführen und um Sicherheitsmechanismen zu umgehen.