https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T09:45:25.530965+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-337713 EUVD-2026-337713 2026-10-06T09:45:25.576684+00:00 EUVD-2026-337713 https://cve.radiocsirt.org/vuln/fkie_cve-2023-53922 fkie_cve-2023-53922 2026-10-06T09:45:25.576727+00:00

TinyWebGallery v2.5 contains a remote code execution vulnerability in the admin upload functionality that allows unauthenticated attackers to upload malicious PHP files. Attackers can upload .phar files with embedded system commands to execute arbitrary code on the server by accessing the uploaded file's URL.

 https://cve.radiocsirt.org/vuln/ghsa-43xj-26f5-3q3h GHSA-43xj-26f5-3q3h 2026-10-06T09:45:25.576761+00:00

TinyWebGallery v2.5 contains a remote code execution vulnerability in the admin upload functionality that allows unauthenticated attackers to upload malicious PHP files. Attackers can upload .phar files with embedded system commands to execute arbitrary code on the server by accessing the uploaded file's URL.