https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T09:33:24.884381+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-07708 bdu:2024-07708 2026-10-07T09:33:24.964883+00:00 bdu:2024-07708 https://cve.radiocsirt.org/vuln/euvd-2026-261706 EUVD-2026-261706 2026-10-07T09:33:24.964925+00:00 EUVD-2026-261706 https://cve.radiocsirt.org/vuln/fkie_cve-2024-7954 fkie_cve-2024-7954 2026-10-07T09:33:24.964940+00:00

The porte_plume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request.

 https://cve.radiocsirt.org/vuln/ghsa-42mv-3h37-wfh9 GHSA-42mv-3h37-wfh9 2026-10-07T09:33:24.964971+00:00

The porte_plume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-7954 UBUNTU-CVE-2024-7954 2026-10-07T09:33:24.964988+00:00

Affected: Ubuntu:Pro:16.04:LTS: spip, Ubuntu:Pro:18.04:LTS: spip, Ubuntu:Pro:20.04:LTS: spip, Ubuntu:22.04:LTS: spip, Ubuntu:24.04:LTS: spip

The porte_plume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request.