https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T09:09:42.684404+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-249007 EUVD-2026-249007 2026-10-06T09:09:42.686581+00:00 EUVD-2026-249007 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8529 fkie_cve-2025-8529 2026-10-06T09:09:42.686612+00:00

A vulnerability classified as critical was found in cloudfavorites favorites-web up to 1.3.0. Affected by this vulnerability is the function getCollectLogoUrl of the file app/src/main/java/com/favorites/web/CollectController.java. The manipulation of the argument url leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

 https://cve.radiocsirt.org/vuln/ghsa-pqcc-2w78-j9fq GHSA-pqcc-2w78-j9fq 2026-10-06T09:09:42.686642+00:00

A vulnerability classified as critical was found in cloudfavorites favorites-web up to 1.3.0. Affected by this vulnerability is the function getCollectLogoUrl of the file app/src/main/java/com/favorites/web/CollectController.java. The manipulation of the argument url leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.