https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:06:35 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-223758 EUVD-2026-223758 https://cve.radiocsirt.org/vuln/euvd-2026-223758 https://cve.radiocsirt.org/vuln/fkie_cve-2025-26260 <p>Plenti &lt;= 0.7.16 is vulnerable to code execution. Users uploading &#39;.svelte&#39; files with the /postLocal endpoint can define the file name as javascript codes. The server executes the uploaded file name in host, and cause code execution.</p> <p>Plenti &lt;= 0.7.16 is vulnerable to code execution. Users uploading &#39;.svelte&#39; files with the /postLocal endpoint can define the file name as javascript codes. The server executes the uploaded file name in host, and cause code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-26260 https://cve.radiocsirt.org/vuln/ghsa-mj4v-hp69-27x5 <p><strong>Affected:</strong> Go: github.com/plentico/plenti</p> <p>### Summary While pushing a file via postLocal method if user add javascript code in file parameter that codes can exe in v8go context.</p> <p>### Details While posting a file via postLocal, any attacker will add javascript codes to file parameter. That parameter content pass to componentSignature method after some validation. After that componentSignature parameter concat with ssrStr parameter.</p> <p>&lt;img width=&#34;1145&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/a08a3fe5-2fbd-4a05-b93c-2ad127e6ee81&#34; /&gt;</p> <p>Last part of compileSvelte function ssrStr parameter executed in v8go engine.</p> <p>&lt;img width=&#34;754&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/4e622761-3324-48d6-8264-6dd6e09055af&#34; /&gt;</p> <p>This cause to any one who can post a file also can push javascript code and run it. Thanks to v8go we can&#39;t use all javascript metod, if there is no any vulnerability in v8go we can&#39;t escape sandbox and can&#39;t run dangerous command like opening socket etc. But we can create infinite loop and the plenti can&#39;t response any request.</p> <p>After posting a file with name &#39;layouts/global/test; eval(`while(1);`);var test.svelte&#39; we can see the ssrStr parameter include our javascript codes.</p> <p>&lt;img width=&#34;1023&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/369c7820-ff8a-4b9a-9cd3-6b0692f1dcf3&#34; /&gt;</p> <p>**Note**: Eval usage not must I just want to ensure that it&#39;s run javascript commands.</p> <p>### PoC **Request** ``` POST /postlocal HTTP/1.1 Host: localhost:3000 Content-Length: 125 Conten…</p> <p><strong>Affected:</strong> Go: github.com/plentico/plenti</p> <p>### Summary While pushing a file via postLocal method if user add javascript code in file parameter that codes can exe in v8go context.</p> <p>### Details While posting a file via postLocal, any attacker will add javascript codes to file parameter. That parameter content pass to componentSignature method after some validation. After that componentSignature parameter concat with ssrStr parameter.</p> <p>&lt;img width=&#34;1145&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/a08a3fe5-2fbd-4a05-b93c-2ad127e6ee81&#34; /&gt;</p> <p>Last part of compileSvelte function ssrStr parameter executed in v8go engine.</p> <p>&lt;img width=&#34;754&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/4e622761-3324-48d6-8264-6dd6e09055af&#34; /&gt;</p> <p>This cause to any one who can post a file also can push javascript code and run it. Thanks to v8go we can&#39;t use all javascript metod, if there is no any vulnerability in v8go we can&#39;t escape sandbox and can&#39;t run dangerous command like opening socket etc. But we can create infinite loop and the plenti can&#39;t response any request.</p> <p>After posting a file with name &#39;layouts/global/test; eval(`while(1);`);var test.svelte&#39; we can see the ssrStr parameter include our javascript codes.</p> <p>&lt;img width=&#34;1023&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/369c7820-ff8a-4b9a-9cd3-6b0692f1dcf3&#34; /&gt;</p> <p>**Note**: Eval usage not must I just want to ensure that it&#39;s run javascript commands.</p> <p>### PoC **Request** ``` POST /postlocal HTTP/1.1 Host: localhost:3000 Content-Length: 125 Conten…</p> https://cve.radiocsirt.org/vuln/ghsa-mj4v-hp69-27x5 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14893-1 <p>govulncheck-vulndb-0.0.20250313T170021-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20250313T170021-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:14893-1