Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:52:56 +0000 bdu:2024-10433 https://cve.radiocsirt.org/vuln/bdu:2024-10433 bdu:2024-10433 https://cve.radiocsirt.org/vuln/bdu:2024-10433 EUVD-2026-337112 https://cve.radiocsirt.org/vuln/euvd-2026-337112 EUVD-2026-337112 https://cve.radiocsirt.org/vuln/euvd-2026-337112 fkie_cve-2024-11680 https://cve.radiocsirt.org/vuln/fkie_cve-2024-11680 <p>ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Remote, unauthenticated attackers can exploit this flaw by sending crafted HTTP requests to options.php, enabling unauthorized modification of the application&#39;s configuration. Successful exploitation allows attackers to create accounts, upload webshells, and embed malicious JavaScript.</p> <p>ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Remote, unauthenticated attackers can exploit this flaw by sending crafted HTTP requests to options.php, enabling unauthorized modification of the application&#39;s configuration. Successful exploitation allows attackers to create accounts, upload webshells, and embed malicious JavaScript.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-11680 GHSA-755x-386x-p26p https://cve.radiocsirt.org/vuln/ghsa-755x-386x-p26p <p>ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Remote, unauthenticated attackers can exploit this flaw by sending crafted HTTP requests to options.php, enabling unauthorized modification of the application&#39;s configuration. Successful exploitation allows attackers to create accounts, upload webshells, and embed malicious JavaScript.</p> <p>ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Remote, unauthenticated attackers can exploit this flaw by sending crafted HTTP requests to options.php, enabling unauthorized modification of the application&#39;s configuration. Successful exploitation allows attackers to create accounts, upload webshells, and embed malicious JavaScript.</p> https://cve.radiocsirt.org/vuln/ghsa-755x-386x-p26p