https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T13:06:15.639504+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-248798 EUVD-2026-248798 2026-10-10T13:06:15.710904+00:00 EUVD-2026-248798 https://cve.radiocsirt.org/vuln/fkie_cve-2025-41396 fkie_cve-2025-41396 2026-10-10T13:06:15.710941+00:00

A path traversal issue exists in file uploading feature of multiple versions of PowerCMS. Arbitrary files may be overwritten by a product user.

 https://cve.radiocsirt.org/vuln/ghsa-q6h2-xf45-gv93 GHSA-q6h2-xf45-gv93 2026-10-10T13:06:15.710974+00:00

A path traversal issue exists in file uploading feature of multiple versions of PowerCMS. Arbitrary files may be overwritten by a product user.

 https://cve.radiocsirt.org/vuln/jvndb-2025-010408 jvndb-2025-010408 2026-10-10T13:06:15.710991+00:00

PowerCMS provided by Alfasado Inc. contains multiple vulnerabilities listed below. * Reflected cross-site scripting (CWE-79) - CVE-2025-36563 * Stored cross-site scripting (CWE-79) - CVE-2025-41391 * Path traversal in file uploading (CWE-22) - CVE-2025-41396 * Path traversal in backup restore (CWE-22) - CVE-2025-46359 * Improper neutralization of formula elements in a CSV file (CWE-1236) - CVE-2025-54752 * Unrestricted upload of file with dangerous type (CWE-434) - CVE-2025-54757 The following people of VCSLab - Viettel Cyber Security reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer. thanhtt74 (Tran Thi Thanh) namdi (Do Ich Nam) quanlna2 (Le Nguyen Anh Quan)