https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 15:46:26 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-15121 EUVD-2026-15121 https://cve.radiocsirt.org/vuln/euvd-2026-15121 https://cve.radiocsirt.org/vuln/fkie_cve-2022-27140 <p>An arbitrary file upload vulnerability in the file upload module of express-fileupload 1.3.1 allows attackers to execute arbitrary code via a crafted PHP file. NOTE: the vendor&#39;s position is that the observed behavior can only occur with &#34;intentional misusing of the API&#34;: the express-fileupload middleware is not responsible for an application&#39;s business logic (e.g., determining whether or how a file should be renamed).</p> <p>An arbitrary file upload vulnerability in the file upload module of express-fileupload 1.3.1 allows attackers to execute arbitrary code via a crafted PHP file. NOTE: the vendor&#39;s position is that the observed behavior can only occur with &#34;intentional misusing of the API&#34;: the express-fileupload middleware is not responsible for an application&#39;s business logic (e.g., determining whether or how a file should be renamed).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-27140 https://cve.radiocsirt.org/vuln/ghsa-4fvq-q2rx-hw88 <p>An arbitrary file upload vulnerability in the file upload module of Express-Fileupload v1.3.1 allows attackers to execute arbitrary code via a crafted PHP file.</p> <p>An arbitrary file upload vulnerability in the file upload module of Express-Fileupload v1.3.1 allows attackers to execute arbitrary code via a crafted PHP file.</p> https://cve.radiocsirt.org/vuln/ghsa-4fvq-q2rx-hw88 https://cve.radiocsirt.org/vuln/gsd-2022-27140 gsd-2022-27140 https://cve.radiocsirt.org/vuln/gsd-2022-27140