https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 06:23:20 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-09789 bdu:2025-09789 https://cve.radiocsirt.org/vuln/bdu:2025-09789 https://cve.radiocsirt.org/vuln/euvd-2026-341362 EUVD-2026-341362 https://cve.radiocsirt.org/vuln/euvd-2026-341362 https://cve.radiocsirt.org/vuln/fkie_cve-2025-1782 <p>In HylaFAX Enterprise Web Interface and AvantFAX, the language form element is not properly sanitized before being used and can be misused to include an arbitrary file in the PHP code allowing an attacker to do anything as the web server user. This flaw requires the attacker to be authenticated with a valid user account.</p> <p>In HylaFAX Enterprise Web Interface and AvantFAX, the language form element is not properly sanitized before being used and can be misused to include an arbitrary file in the PHP code allowing an attacker to do anything as the web server user. This flaw requires the attacker to be authenticated with a valid user account.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-1782 https://cve.radiocsirt.org/vuln/ghsa-qx93-7wx9-6wp7 <p>In HylaFAX Enterprise Web Interface and AvantFAX, the language form element is not properly sanitized before being used and can be misused to include an arbitrary file in the PHP code allowing an attacker to do anything as the web server user. This flaw requires the attacker to be authenticated with a valid user account.</p> <p>In HylaFAX Enterprise Web Interface and AvantFAX, the language form element is not properly sanitized before being used and can be misused to include an arbitrary file in the PHP code allowing an attacker to do anything as the web server user. This flaw requires the attacker to be authenticated with a valid user account.</p> https://cve.radiocsirt.org/vuln/ghsa-qx93-7wx9-6wp7