https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-26T23:16:27.191872+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-135379 EUVD-2026-135379 2026-10-26T23:16:27.194876+00:00 EUVD-2026-135379 https://cve.radiocsirt.org/vuln/fkie_cve-2007-3424 fkie_cve-2007-3424 2026-10-26T23:16:27.194908+00:00

The moveim function in cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7 uses the tocat parameter as a subdirectory name when moving an instant message, which has unknown impact and remote attack vectors.

 https://cve.radiocsirt.org/vuln/ghsa-498h-6pm8-vxw6 GHSA-498h-6pm8-vxw6 2026-10-26T23:16:27.194938+00:00

The moveim function in cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7 uses the tocat parameter as a subdirectory name when moving an instant message, which has unknown impact and remote attack vectors.

 https://cve.radiocsirt.org/vuln/gsd-2007-3424 gsd-2007-3424 2026-10-26T23:16:27.194956+00:00 gsd-2007-3424