https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:22:25.366696+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-275483 EUVD-2026-275483 2026-10-03T06:22:25.432758+00:00 EUVD-2026-275483 https://cve.radiocsirt.org/vuln/fkie_cve-2025-70129 fkie_cve-2025-70129 2026-10-03T06:22:25.432795+00:00

If the anti spam-captcha functionality in PluXml versions 5.8.22 and earlier is enabled, a captcha challenge is generated with a format that can be automatically recognized for articles, such that an automated script is able to solve this anti-spam mechanism trivially and publish spam comments. The details of captcha challenge are exposed within document body of articles with comments & anti spam-captcha functionalities enabled, including "capcha-letter", "capcha-word" and "capcha-token" which can be used to construct a valid post request to publish a comment. As such, attackers can flood articles with automated spam comments, especially if there are no other web defenses available.

 https://cve.radiocsirt.org/vuln/ghsa-4639-47cp-327m GHSA-4639-47cp-327m 2026-10-03T06:22:25.432832+00:00

If the anti spam-captcha functionality in PluXml versions 5.8.22 and earlier is enabled, a captcha challenge is generated with a format that can be automatically recognized for articles, such that an automated script is able to solve this anti-spam mechanism trivially and publish spam comments. The details of captcha challenge are exposed within document body of articles with comments & anti spam-captcha functionalities enabled, including "capcha-letter", "capcha-word" and "capcha-token" which can be used to construct a valid post request to publish a comment. As such, attackers can flood articles with automated spam comments, especially if there are no other web defenses available.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-70129 UBUNTU-CVE-2025-70129 2026-10-03T06:22:25.432853+00:00

Affected: Ubuntu:16.04:LTS: pluxml, Ubuntu:18.04:LTS: pluxml, Ubuntu:20.04:LTS: pluxml, Ubuntu:22.04:LTS: pluxml

If the anti spam-captcha functionality in PluXml versions 5.8.22 and earlier is enabled, a captcha challenge is generated with a format that can be automatically recognized for articles, such that an automated script is able to solve this anti-spam mechanism trivially and publish spam comments. The details of captcha challenge are exposed within document body of articles with comments & anti spam-captcha functionalities enabled, including "capcha-letter", "capcha-word" and "capcha-token" which can be used to construct a valid post request to publish a comment. As such, attackers can flood articles with automated spam comments, especially if there are no other web defenses available.