https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T21:30:48.020607+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-251586 EUVD-2026-251586 2026-10-18T21:30:48.038399+00:00 EUVD-2026-251586 https://cve.radiocsirt.org/vuln/fkie_cve-2025-41031 fkie_cve-2025-41031 2026-10-18T21:30:48.038433+00:00

Lack of authorisation in Deporsite by T-INNOVA. This vulnerability allows an unauthenticated attacker to change other users' profile pictures via a POST request using the parameters ‘IdPersona’ and “Foto” in ‘/ajax/TInnova_c/FotoUsuario/llamadaAjax/uploadImage’.