Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:51:42 +0000 BIT-gitea-2025-68939 https://cve.radiocsirt.org/vuln/bit-gitea-2025-68939 <p><strong>Affected:</strong> Bitnami: gitea</p> <p>Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API.</p> <p><strong>Affected:</strong> Bitnami: gitea</p> <p>Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API.</p> https://cve.radiocsirt.org/vuln/bit-gitea-2025-68939 EUVD-2026-264452 https://cve.radiocsirt.org/vuln/euvd-2026-264452 EUVD-2026-264452 https://cve.radiocsirt.org/vuln/euvd-2026-264452 fkie_cve-2025-68939 https://cve.radiocsirt.org/vuln/fkie_cve-2025-68939 <p>Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API.</p> <p>Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-68939 GHSA-263q-5cv3-xq9g — Gitea allows attackers to add attachments with forbidden file extensions https://cve.radiocsirt.org/vuln/ghsa-263q-5cv3-xq9g <p><strong>Affected:</strong> Go: code.gitea.io/gitea</p> <p>Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API.</p> <p><strong>Affected:</strong> Go: code.gitea.io/gitea</p> <p>Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API.</p> https://cve.radiocsirt.org/vuln/ghsa-263q-5cv3-xq9g WID-SEC-W-2025-2925 — Gitea: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2925 <p>Ein Angreifer kann mehrere Schwachstellen in Gitea ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, und um Dateien zu manipulieren.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Gitea ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, und um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2925