https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T03:48:48.293212+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-22137 CVE-2025-22137 — Arbitrary File Overwrite via HTTP POST in Pingvin Share 2026-10-17T03:48:48.294434+00:00

Affected: stonith404 pingvin-share

Pingvin Share is a self-hosted file sharing platform and an alternative for WeTransfer. This vulnerability allows an authenticated or unauthenticated (if anonymous shares are allowed) user to overwrite arbitrary files on the server, including sensitive system files, via HTTP POST requests. The issue has been patched in version 1.4.0.