https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T14:40:27.407287+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-54849 EUVD-2026-54849 2026-10-25T14:40:27.410210+00:00 EUVD-2026-54849 https://cve.radiocsirt.org/vuln/fkie_cve-2019-12170 fkie_cve-2019-12170 2026-10-25T14:40:27.410240+00:00

ATutor through 2.2.4 is vulnerable to arbitrary file uploads via the mods/_core/backups/upload.php (aka backup) component. This may result in remote command execution. An attacker can use the instructor account to fully compromise the system using a crafted backup ZIP archive. This will allow for PHP files to be written to the web root, and for code to execute on the remote server.

 https://cve.radiocsirt.org/vuln/ghsa-5vj3-gfgg-q9v5 GHSA-5vj3-gfgg-q9v5 2026-10-25T14:40:27.410271+00:00

ATutor through 2.2.4 is vulnerable to arbitrary file uploads via the mods/_core/backups/upload.php (aka backup) component. This may result in remote command execution. An attacker can use the instructor account to fully compromise the system using a crafted backup ZIP archive. This will allow for PHP files to be written to the web root, and for code to execute on the remote server.

 https://cve.radiocsirt.org/vuln/gsd-2019-12170 gsd-2019-12170 2026-10-25T14:40:27.410289+00:00 gsd-2019-12170