https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T20:21:50.707102+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-07946 cnvd-2016-07946 2026-10-17T20:21:50.710929+00:00 cnvd-2016-07946 https://cve.radiocsirt.org/vuln/euvd-2026-84786 EUVD-2026-84786 2026-10-17T20:21:50.710963+00:00 EUVD-2026-84786 https://cve.radiocsirt.org/vuln/fkie_cve-2016-4862 fkie_cve-2016-4862 2026-10-17T20:21:50.710977+00:00

Twigmo bundled with CS-Cart 4.3.9 and earlier and Twigmo bundled with CS-Cart Multi-Vendor 4.3.9 and earlier allow remote authenticated users to execute arbitrary PHP code on the servers.

 https://cve.radiocsirt.org/vuln/ghsa-w5gj-ccxg-c83p GHSA-w5gj-ccxg-c83p 2026-10-17T20:21:50.711005+00:00

Twigmo bundled with CS-Cart 4.3.9 and earlier and Twigmo bundled with CS-Cart Multi-Vendor 4.3.9 and earlier allow remote authenticated users to execute arbitrary PHP code on the servers.

 https://cve.radiocsirt.org/vuln/gsd-2016-4862 gsd-2016-4862 2026-10-17T20:21:50.711021+00:00 gsd-2016-4862 https://cve.radiocsirt.org/vuln/jvndb-2016-000157 jvndb-2016-000157 2026-10-17T20:21:50.711032+00:00

CS-Cart add-on "Twigmo" contains a PHP object injection vulnerability due to a flaw where untrusted input values are unserialized. ASAI Ken reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.