https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:17:04 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-166770 EUVD-2026-166770 https://cve.radiocsirt.org/vuln/euvd-2026-166770 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25299 <p>This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mg_http_upload() method may enable attackers to write files to arbitrary locations outside the designated target folder.</p> <p>This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mg_http_upload() method may enable attackers to write files to arbitrary locations outside the designated target folder.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-25299 https://cve.radiocsirt.org/vuln/ghsa-q66h-r8q8-x284 <p>This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mg_http_upload() method may enable attackers to write files to arbitrary locations outside the designated target folder.</p> <p>This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mg_http_upload() method may enable attackers to write files to arbitrary locations outside the designated target folder.</p> https://cve.radiocsirt.org/vuln/ghsa-q66h-r8q8-x284 https://cve.radiocsirt.org/vuln/gsd-2022-25299 gsd-2022-25299 https://cve.radiocsirt.org/vuln/gsd-2022-25299 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-25299 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: phantomjs, Ubuntu:18.04:LTS: phantomjs, Ubuntu:20.04:LTS: phantomjs</p> <p>This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mg_http_upload() method may enable attackers to write files to arbitrary locations outside the designated target folder.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: phantomjs, Ubuntu:18.04:LTS: phantomjs, Ubuntu:20.04:LTS: phantomjs</p> <p>This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mg_http_upload() method may enable attackers to write files to arbitrary locations outside the designated target folder.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-25299 https://cve.radiocsirt.org/vuln/vde-2022-033 <p>PASvisu is an HMI solution for Machine Visualization. It is available as a standalone software product, but it is also included in various models of the PMI product family. The PASvisu Server component contains multiple vulnerabilities which can be utilised to write arbitrary files, potentially leading to code execution.</p> <p>PASvisu is an HMI solution for Machine Visualization. It is available as a standalone software product, but it is also included in various models of the PMI product family. The PASvisu Server component contains multiple vulnerabilities which can be utilised to write arbitrary files, potentially leading to code execution.</p> https://cve.radiocsirt.org/vuln/vde-2022-033