https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 17:25:36 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-01008 bdu:2023-01008 https://cve.radiocsirt.org/vuln/bdu:2023-01008 https://cve.radiocsirt.org/vuln/euvd-2026-223640 EUVD-2026-223640 https://cve.radiocsirt.org/vuln/euvd-2026-223640 https://cve.radiocsirt.org/vuln/fkie_cve-2023-22855 <p>Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 8088. A user-controllable path is handed to a path-concatenation method (Path.Combine from .NET) without proper sanitisation. This yields the possibility of including local files, as well as remote files on SMB shares. If one provides a file with the extension .t4, it is rendered with the .NET templating engine mono/t4, which can execute code.</p> <p>Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 8088. A user-controllable path is handed to a path-concatenation method (Path.Combine from .NET) without proper sanitisation. This yields the possibility of including local files, as well as remote files on SMB shares. If one provides a file with the extension .t4, it is rendered with the .NET templating engine mono/t4, which can execute code.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-22855 https://cve.radiocsirt.org/vuln/ghsa-f9jv-w5v2-f33c <p>Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 8088. A user-controllable path is handed to a path-concatenation method (Path.Combine from .NET) without proper sanitisation. This yields the possibility of including local files, as well as remote files on SMB shares. If one provides a file with the extension .t4, it is rendered with the .NET templating engine mono/t4, which can execute code.</p> <p>Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 8088. A user-controllable path is handed to a path-concatenation method (Path.Combine from .NET) without proper sanitisation. This yields the possibility of including local files, as well as remote files on SMB shares. If one provides a file with the extension .t4, it is rendered with the .NET templating engine mono/t4, which can execute code.</p> https://cve.radiocsirt.org/vuln/ghsa-f9jv-w5v2-f33c https://cve.radiocsirt.org/vuln/gsd-2023-22855 gsd-2023-22855 https://cve.radiocsirt.org/vuln/gsd-2023-22855