https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 21:53:45 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-19402 cnvd-2018-19402 https://cve.radiocsirt.org/vuln/cnvd-2018-19402 https://cve.radiocsirt.org/vuln/euvd-2026-68575 EUVD-2026-68575 https://cve.radiocsirt.org/vuln/euvd-2026-68575 https://cve.radiocsirt.org/vuln/fkie_cve-2018-17139 <p>UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with the image/jpeg content type.</p> <p>UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with the image/jpeg content type.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-17139 https://cve.radiocsirt.org/vuln/ghsa-9x5j-whx3-gg57 <p>UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with the image/jpeg content type.</p> <p>UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with the image/jpeg content type.</p> https://cve.radiocsirt.org/vuln/ghsa-9x5j-whx3-gg57 https://cve.radiocsirt.org/vuln/gsd-2018-17139 gsd-2018-17139 https://cve.radiocsirt.org/vuln/gsd-2018-17139