https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T12:26:41.432429+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-280878 EUVD-2026-280878 2026-10-19T12:26:41.438913+00:00 EUVD-2026-280878 https://cve.radiocsirt.org/vuln/fkie_cve-2023-53872 fkie_cve-2023-53872 2026-10-19T12:26:41.438991+00:00

Wp2Fac 1.0 contains an OS command injection vulnerability in the send.php endpoint that allows remote attackers to execute arbitrary system commands. Attackers can inject shell commands through the 'numara' parameter by appending shell commands with '&' operators to execute malicious code.

 https://cve.radiocsirt.org/vuln/ghsa-pmxp-m64w-v7f6 GHSA-pmxp-m64w-v7f6 2026-10-19T12:26:41.439059+00:00

Wp2Fac 1.0 contains an OS command injection vulnerability in the send.php endpoint that allows remote attackers to execute arbitrary system commands. Attackers can inject shell commands through the 'numara' parameter by appending shell commands with '&' operators to execute malicious code.