https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:13:21 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-252437 EUVD-2026-252437 https://cve.radiocsirt.org/vuln/euvd-2026-252437 https://cve.radiocsirt.org/vuln/fkie_cve-2025-41714 <p>The upload endpoint insufficiently validates the &#39;Upload-Key&#39; request header. By supplying path traversal sequences, an authenticated attacker can cause the server to create upload-related artifacts outside the intended storage location. In certain configurations this enables arbitrary file write and may be leveraged to achieve remote code execution.</p> <p>The upload endpoint insufficiently validates the &#39;Upload-Key&#39; request header. By supplying path traversal sequences, an authenticated attacker can cause the server to create upload-related artifacts outside the intended storage location. In certain configurations this enables arbitrary file write and may be leveraged to achieve remote code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-41714 https://cve.radiocsirt.org/vuln/ghsa-8cjm-642p-wq8x <p>The upload endpoint insufficiently validates the &#39;Upload-Key&#39; request header. By supplying path traversal sequences, an authenticated attacker can cause the server to create upload-related artifacts outside the intended storage location. In certain configurations this enables arbitrary file write and may be leveraged to achieve remote code execution.</p> <p>The upload endpoint insufficiently validates the &#39;Upload-Key&#39; request header. By supplying path traversal sequences, an authenticated attacker can cause the server to create upload-related artifacts outside the intended storage location. In certain configurations this enables arbitrary file write and may be leveraged to achieve remote code execution.</p> https://cve.radiocsirt.org/vuln/ghsa-8cjm-642p-wq8x https://cve.radiocsirt.org/vuln/vde-2025-085 <p>A path traversal flaw in the SmartEMS upload handling allows authenticated users to direct upload data outside of the intended directory via the &#39;Upload-Key&#39; header. In deployments where writable, code-interpreted paths are reachable, this may lead to remote code execution.</p> <p>A path traversal flaw in the SmartEMS upload handling allows authenticated users to direct upload data outside of the intended directory via the &#39;Upload-Key&#39; header. In deployments where writable, code-interpreted paths are reachable, this may lead to remote code execution.</p> https://cve.radiocsirt.org/vuln/vde-2025-085