https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T17:50:32.822853+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-03880 cnvd-2015-03880 2026-10-21T17:50:32.826444+00:00 cnvd-2015-03880 https://cve.radiocsirt.org/vuln/euvd-2026-91486 EUVD-2026-91486 2026-10-21T17:50:32.826481+00:00 EUVD-2026-91486 https://cve.radiocsirt.org/vuln/fkie_cve-2015-2954 fkie_cve-2015-2954 2026-10-21T17:50:32.826496+00:00

Cross-site request forgery (CSRF) vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to hijack the authentication of arbitrary users.

 https://cve.radiocsirt.org/vuln/ghsa-fg4r-gvrc-v26g GHSA-fg4r-gvrc-v26g 2026-10-21T17:50:32.826526+00:00

Cross-site request forgery (CSRF) vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to hijack the authentication of arbitrary users.

 https://cve.radiocsirt.org/vuln/gsd-2015-2954 gsd-2015-2954 2026-10-21T17:50:32.826541+00:00 gsd-2015-2954 https://cve.radiocsirt.org/vuln/jvndb-2015-000079 jvndb-2015-000079 2026-10-21T17:50:32.826552+00:00

MilkyStep provided by Igreks Inc. is a CGI for e-mail newsletter distribution management. MilkyStep contains a cross-site request forgery vulnerability (CWE-352). Kusano Kazuhiko reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.