https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:10:10 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-257118 EUVD-2026-257118 https://cve.radiocsirt.org/vuln/euvd-2026-257118 https://cve.radiocsirt.org/vuln/fkie_cve-2025-64095 <p>DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1, the default HTML editor provider allows unauthenticated file uploads and images can overwrite existing files. An unauthenticated user can upload and replace existing files allowing defacing a website and combined with other issue, injection XSS payloads. This vulnerability is fixed in 10.1.1.</p> <p>DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1, the default HTML editor provider allows unauthenticated file uploads and images can overwrite existing files. An unauthenticated user can upload and replace existing files allowing defacing a website and combined with other issue, injection XSS payloads. This vulnerability is fixed in 10.1.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-64095 https://cve.radiocsirt.org/vuln/ghsa-3m8r-w7xg-jqvw <p><strong>Affected:</strong> NuGet: DNN.PLATFORM</p> <p>### Summary The default HTML editor provider allows unauthenticated file uploads and images can overwrite existing files.</p> <p>### Description An unauthenticated user can upload and replace existing files allowing defacing a website and combined with other issue, injection XSS payloads.</p> <p><strong>Affected:</strong> NuGet: DNN.PLATFORM</p> <p>### Summary The default HTML editor provider allows unauthenticated file uploads and images can overwrite existing files.</p> <p>### Description An unauthenticated user can upload and replace existing files allowing defacing a website and combined with other issue, injection XSS payloads.</p> https://cve.radiocsirt.org/vuln/ghsa-3m8r-w7xg-jqvw https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2535 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in DNN ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in DNN ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2535