https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T10:42:02.841083+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-55743 CVE-2025-55743 — UnoPim vulnerable to remote code execution through Arbitrary File upload 2026-10-09T10:42:02.858553+00:00

Affected: unopim

UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Before 0.2.1, the image upload at the user creation feature performs only client side file type validation. A user can capture the request by uploading an image, capture the request through a Proxy like Burp suite. Make changes to the file extension and content. The vulnerability is fixed in 0.2.1.