https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 05:35:39 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-19653 EUVD-2026-19653 https://cve.radiocsirt.org/vuln/euvd-2026-19653 https://cve.radiocsirt.org/vuln/fkie_cve-2022-44036 <p>In b2evolution 7.2.5, if configured with admins_can_manipulate_sensitive_files, arbitrary file upload is allowed for admins, leading to command execution. NOTE: the vendor&#39;s position is that this is &#34;very obviously a feature not an issue and if you don&#39;t like that feature it is very obvious how to disable it.&#34;</p> <p>In b2evolution 7.2.5, if configured with admins_can_manipulate_sensitive_files, arbitrary file upload is allowed for admins, leading to command execution. NOTE: the vendor&#39;s position is that this is &#34;very obviously a feature not an issue and if you don&#39;t like that feature it is very obvious how to disable it.&#34;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-44036 https://cve.radiocsirt.org/vuln/ghsa-5c2h-v384-qmpw <p>RESERVED There is an arbitrary file upload vulnerability in b2evolution v7.2.5. Attackers can use this vulnerability to execute remote commands.</p> <p>RESERVED There is an arbitrary file upload vulnerability in b2evolution v7.2.5. Attackers can use this vulnerability to execute remote commands.</p> https://cve.radiocsirt.org/vuln/ghsa-5c2h-v384-qmpw https://cve.radiocsirt.org/vuln/gsd-2022-44036 gsd-2022-44036 https://cve.radiocsirt.org/vuln/gsd-2022-44036