https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 10:44:34 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-334169 EUVD-2026-334169 https://cve.radiocsirt.org/vuln/euvd-2026-334169 https://cve.radiocsirt.org/vuln/fkie_cve-2020-24914 <p>A PHP object injection bug in profile.php in qcubed (all versions including 3.1.1) unserializes the untrusted data of the POST-variable &#34;strProfileData&#34; and allows an unauthenticated attacker to execute code via a crafted POST request.</p> <p>A PHP object injection bug in profile.php in qcubed (all versions including 3.1.1) unserializes the untrusted data of the POST-variable &#34;strProfileData&#34; and allows an unauthenticated attacker to execute code via a crafted POST request.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-24914 https://cve.radiocsirt.org/vuln/ghsa-7w3c-jgh7-cwjw <p><strong>Affected:</strong> Packagist: qcubed/qcubed</p> <p>A PHP object injection bug in profile.php in qcubed (all versions including 3.1.1) unserializes the untrusted data of the POST-variable &#34;strProfileData&#34; and allows an unauthenticated attacker to execute code via a crafted POST request.</p> <p><strong>Affected:</strong> Packagist: qcubed/qcubed</p> <p>A PHP object injection bug in profile.php in qcubed (all versions including 3.1.1) unserializes the untrusted data of the POST-variable &#34;strProfileData&#34; and allows an unauthenticated attacker to execute code via a crafted POST request.</p> https://cve.radiocsirt.org/vuln/ghsa-7w3c-jgh7-cwjw https://cve.radiocsirt.org/vuln/gsd-2020-24914 gsd-2020-24914 https://cve.radiocsirt.org/vuln/gsd-2020-24914