https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T21:17:16.269066+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-28270 CVE-2024-28270 2026-10-10T21:17:16.284728+00:00

Affected: enilu web-flash

An issue discovered in web-flash v3.0 allows attackers to reset passwords for arbitrary users via crafted POST request to /prod-api/user/resetPassword.