https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T07:03:20.443331+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-143271 EUVD-2026-143271 2026-10-27T07:03:20.538672+00:00 EUVD-2026-143271 https://cve.radiocsirt.org/vuln/fkie_cve-2006-5137 fkie_cve-2006-5137 2026-10-27T07:03:20.538708+00:00

Multiple direct static code injection vulnerabilities in Groupee UBB.threads 6.5.1.1 allow remote attackers to (1) inject PHP code via a theme[] array parameter to admin/doedittheme.php, which is injected into includes/theme.inc.php; (2) inject PHP code via a config[] array parameter to admin/doeditconfig.php, and then execute the code via includes/config.inc.php; and inject a reference to PHP code via a URL in the config[path] parameter, and then execute the code via (3) dorateuser.php, (4) calendar.php, and unspecified other scripts.

 https://cve.radiocsirt.org/vuln/ghsa-8gqx-3g5h-mh24 GHSA-8gqx-3g5h-mh24 2026-10-27T07:03:20.538741+00:00

Multiple direct static code injection vulnerabilities in Groupee UBB.threads 6.5.1.1 allow remote attackers to (1) inject PHP code via a theme[] array parameter to admin/doedittheme.php, which is injected into includes/theme.inc.php; (2) inject PHP code via a config[] array parameter to admin/doeditconfig.php, and then execute the code via includes/config.inc.php; and inject a reference to PHP code via a URL in the config[path] parameter, and then execute the code via (3) dorateuser.php, (4) calendar.php, and unspecified other scripts.

 https://cve.radiocsirt.org/vuln/gsd-2006-5137 gsd-2006-5137 2026-10-27T07:03:20.538761+00:00 gsd-2006-5137