https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T01:31:14.424216+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-318278 EUVD-2026-318278 2026-10-20T01:31:14.426230+00:00 EUVD-2026-318278 https://cve.radiocsirt.org/vuln/fkie_cve-2025-34095 fkie_cve-2025-34095 2026-10-20T01:31:14.426263+00:00

An OS command injection vulnerability exists in Mako Server versions 2.5 and 2.6, specifically within the tutorial interface provided by the examples/save.lsp endpoint. An unauthenticated attacker can send a crafted PUT request containing arbitrary Lua os.execute() code, which is then persisted on disk and triggered via a subsequent GET request to examples/manage.lsp. This allows remote command execution on the underlying operating system, impacting both Windows and Unix-based deployments.

 https://cve.radiocsirt.org/vuln/ghsa-fh7x-m234-3vg3 GHSA-fh7x-m234-3vg3 2026-10-20T01:31:14.426295+00:00

An OS command injection vulnerability exists in Mako Server versions 2.5 and 2.6, specifically within the tutorial interface provided by the examples/save.lsp endpoint. An unauthenticated attacker can send a crafted PUT request containing arbitrary Lua os.execute() code, which is then persisted on disk and triggered via a subsequent GET request to examples/manage.lsp. This allows remote command execution on the underlying operating system, impacting both Windows and Unix-based deployments.