https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T08:35:09.569127+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-250749 EUVD-2026-250749 2026-10-08T08:35:09.618531+00:00 EUVD-2026-250749 https://cve.radiocsirt.org/vuln/fkie_cve-2025-52130 fkie_cve-2025-52130 2026-10-08T08:35:09.618567+00:00

File upload vulnerability in WebErpMesv2 1.17 in the app/Http/Controllers/FactoryController.php controller. This flaw allows an authenticated attacker to upload arbitrary files, including PHP scripts, which can be accessed via direct GET requests, potentially resulting in remote code execution (RCE) on the web server.

 https://cve.radiocsirt.org/vuln/ghsa-jpmf-r2gf-85wf GHSA-jpmf-r2gf-85wf 2026-10-08T08:35:09.618601+00:00

File upload vulnerability in WebErpMesv2 1.17 in the app/Http/Controllers/FactoryController.php controller. This flaw allows an authenticated attacker to upload arbitrary files, including PHP scripts, which can be accessed via direct GET requests, potentially resulting in remote code execution (RCE) on the web server.