https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T23:39:56.000035+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-128788 EUVD-2026-128788 2026-10-20T23:39:56.005180+00:00 EUVD-2026-128788 https://cve.radiocsirt.org/vuln/fkie_cve-2008-3736 fkie_cve-2008-3736 2026-10-20T23:39:56.005215+00:00

Multiple cross-site request forgery (CSRF) vulnerabilities in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that (a) change passwords or (b) change configurations.

 https://cve.radiocsirt.org/vuln/ghsa-5www-2q34-5r5q GHSA-5www-2q34-5r5q 2026-10-20T23:39:56.005246+00:00

Multiple cross-site request forgery (CSRF) vulnerabilities in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that (a) change passwords or (b) change configurations.

 https://cve.radiocsirt.org/vuln/gsd-2008-3736 gsd-2008-3736 2026-10-20T23:39:56.005263+00:00 gsd-2008-3736 https://cve.radiocsirt.org/vuln/jvndb-2008-000046 jvndb-2008-000046 2026-10-20T23:39:56.005274+00:00

La!cooda WIZ and LacoodaST contain a cross-site request forgery vulnerability. La!cooda WIZ from System Consultants Co., Ltd. and LacoodaST from SpaceTag, Inc. are groupware providing schedule and task managements, etc. La!cooda WIZ and LacoodaST contain a cross-site request forgery vulnerability. Hirotaka Katagiri reported this vulnerability to IPA. JPCERT/CC coordinated with the vendors under Information Security Early Warning Partnership.