https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T20:45:00.143714+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-261212 EUVD-2026-261212 2026-10-25T20:45:00.146133+00:00 EUVD-2026-261212 https://cve.radiocsirt.org/vuln/fkie_cve-2025-63712 fkie_cve-2025-63712 2026-10-25T20:45:00.146169+00:00

Cross-Site Request Forgery (CSRF) in SourceCodester Product Expiry Management System. The User Management module (delete-user.php) allows remote attackers to delete arbitrary user accounts via forged cross-origin GET requests because the endpoint relies solely on session cookies and lacks CSRF protection.

 https://cve.radiocsirt.org/vuln/ghsa-j4x6-f7fr-5mjc GHSA-j4x6-f7fr-5mjc 2026-10-25T20:45:00.146212+00:00

Cross-Site Request Forgery (CSRF) in SourceCodester Product Expiry Management System. The User Management module (delete-user.php) allows remote attackers to delete arbitrary user accounts via forged cross-origin GET requests because the endpoint relies solely on session cookies and lacks CSRF protection.