https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 08:05:31 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-08022 bdu:2024-08022 https://cve.radiocsirt.org/vuln/bdu:2024-08022 https://cve.radiocsirt.org/vuln/euvd-2026-195581 EUVD-2026-195581 https://cve.radiocsirt.org/vuln/euvd-2026-195581 https://cve.radiocsirt.org/vuln/fkie_cve-2024-42640 <p>angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability allows an attacker to upload arbitrary content to the server, which can subsequently be accessed through demo/uploads. This leads to the execution of previously uploaded content and enables the attacker to achieve code execution on the server. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.</p> <p>angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability allows an attacker to upload arbitrary content to the server, which can subsequently be accessed through demo/uploads. This leads to the execution of previously uploaded content and enables the attacker to achieve code execution on the server. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-42640 https://cve.radiocsirt.org/vuln/ghsa-vgxq-6rcf-qwrw <p><strong>Affected:</strong> npm: angular-base64-upload</p> <p>angular-base64-upload versions prior to v0.1.21 are vulnerable to unauthenticated remote code execution via the `angular-base64-upload/demo/server.php` endpoint. Exploitation of this vulnerability involves uploading arbitrary file content to the server, which can subsequently accessed through the `angular-base64-upload/demo/uploads` endpoint. This leads to the execution of previously uploaded content which enables the attacker to achieve code execution on the server.</p> <p>NOTE: This vulnerability only affects products that are no longer supported by the maintainer.</p> <p><strong>Affected:</strong> npm: angular-base64-upload</p> <p>angular-base64-upload versions prior to v0.1.21 are vulnerable to unauthenticated remote code execution via the `angular-base64-upload/demo/server.php` endpoint. Exploitation of this vulnerability involves uploading arbitrary file content to the server, which can subsequently accessed through the `angular-base64-upload/demo/uploads` endpoint. This leads to the execution of previously uploaded content which enables the attacker to achieve code execution on the server.</p> <p>NOTE: This vulnerability only affects products that are no longer supported by the maintainer.</p> https://cve.radiocsirt.org/vuln/ghsa-vgxq-6rcf-qwrw