https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T23:24:30.886864+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-08022 bdu:2024-08022 2026-10-08T23:24:30.950777+00:00 bdu:2024-08022 https://cve.radiocsirt.org/vuln/euvd-2026-195581 EUVD-2026-195581 2026-10-08T23:24:30.950816+00:00 EUVD-2026-195581 https://cve.radiocsirt.org/vuln/fkie_cve-2024-42640 fkie_cve-2024-42640 2026-10-08T23:24:30.950830+00:00

angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability allows an attacker to upload arbitrary content to the server, which can subsequently be accessed through demo/uploads. This leads to the execution of previously uploaded content and enables the attacker to achieve code execution on the server. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

 https://cve.radiocsirt.org/vuln/ghsa-vgxq-6rcf-qwrw GHSA-vgxq-6rcf-qwrw — angular-base64-upload vulnerable to unauthenticated remote code execution 2026-10-08T23:24:30.950862+00:00

Affected: npm: angular-base64-upload

angular-base64-upload versions prior to v0.1.21 are vulnerable to unauthenticated remote code execution via the `angular-base64-upload/demo/server.php` endpoint. Exploitation of this vulnerability involves uploading arbitrary file content to the server, which can subsequently accessed through the `angular-base64-upload/demo/uploads` endpoint. This leads to the execution of previously uploaded content which enables the attacker to achieve code execution on the server.

NOTE: This vulnerability only affects products that are no longer supported by the maintainer.