https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T23:01:50.013007+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-225542 EUVD-2026-225542 2026-10-18T23:01:50.016822+00:00 EUVD-2026-225542 https://cve.radiocsirt.org/vuln/fkie_cve-2025-29993 fkie_cve-2025-29993 2026-10-18T23:01:50.016857+00:00

The affected versions of PowerCMS allow HTTP header injection. This vulnerability can be leveraged to direct the affected product to send email with a tampered URL, such as password reset mail.

 https://cve.radiocsirt.org/vuln/ghsa-fxjm-4m3m-24xv GHSA-fxjm-4m3m-24xv 2026-10-18T23:01:50.016887+00:00

The affected versions of PowerCMS allow HTTP header injection. This vulnerability can be leveraged to direct the affected product to send email with a tampered URL, such as password reset mail.

 https://cve.radiocsirt.org/vuln/jvndb-2025-000021 jvndb-2025-000021 2026-10-18T23:01:50.016903+00:00

PowerCMS provided by Alfasado Inc. contains multiple vulnerabilities listed below. <ul> <li>Injection (CWE-74) - CVE-2025-29993</li> <li>Dependency on vulnerable third-party component (CWE-1395) - CVE-2021-21252</li> </ul> Alfasado Inc. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and Alfasado Inc. coordinated under the Information Security Early Warning Partnership.