https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:23:52.711759+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-280914 EUVD-2026-280914 2026-10-06T22:23:52.757716+00:00 EUVD-2026-280914 https://cve.radiocsirt.org/vuln/fkie_cve-2023-53924 fkie_cve-2023-53924 2026-10-06T22:23:52.757755+00:00

UliCMS 2023.1-sniffing-vicuna contains a remote code execution vulnerability that allows authenticated attackers to upload PHP files with .phar extension during profile avatar upload. Attackers can trigger code execution by visiting the uploaded file's location, enabling system command execution through maliciously crafted avatar uploads.

 https://cve.radiocsirt.org/vuln/ghsa-xrjv-cxq7-2pw3 GHSA-xrjv-cxq7-2pw3 2026-10-06T22:23:52.757791+00:00

UliCMS 2023.1-sniffing-vicuna contains a remote code execution vulnerability that allows authenticated attackers to upload PHP files with .phar extension during profile avatar upload. Attackers can trigger code execution by visiting the uploaded file's location, enabling system command execution through maliciously crafted avatar uploads.