Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 03:13:25 +0000 bdu:2026-12610 https://cve.radiocsirt.org/vuln/bdu:2026-12610 bdu:2026-12610 https://cve.radiocsirt.org/vuln/bdu:2026-12610 EUVD-2026-356720 https://cve.radiocsirt.org/vuln/euvd-2026-356720 EUVD-2026-356720 https://cve.radiocsirt.org/vuln/euvd-2026-356720 fkie_cve-2026-75920 https://cve.radiocsirt.org/vuln/fkie_cve-2026-75920 <p>phpMyFAQ before v4.1.6 writes content backup ZIP archives to the web-accessible document root at content.zip, exposing sensitive files including database credentials. Unauthenticated attackers can race concurrent requests to download the temporary ZIP file before deletion, or exploit XSS in admin contexts to trigger authenticated backups and retrieve the archive.</p> <p>phpMyFAQ before v4.1.6 writes content backup ZIP archives to the web-accessible document root at content.zip, exposing sensitive files including database credentials. Unauthenticated attackers can race concurrent requests to download the temporary ZIP file before deletion, or exploit XSS in admin contexts to trigger authenticated backups and retrieve the archive.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-75920 GHSA-2mwq-hcmq-fqq4 https://cve.radiocsirt.org/vuln/ghsa-2mwq-hcmq-fqq4 <p>phpMyFAQ before v4.1.6 writes content backup ZIP archives to the web-accessible document root at content.zip, exposing sensitive files including database credentials. Unauthenticated attackers can race concurrent requests to download the temporary ZIP file before deletion, or exploit XSS in admin contexts to trigger authenticated backups and retrieve the archive.</p> <p>phpMyFAQ before v4.1.6 writes content backup ZIP archives to the web-accessible document root at content.zip, exposing sensitive files including database credentials. Unauthenticated attackers can race concurrent requests to download the temporary ZIP file before deletion, or exploit XSS in admin contexts to trigger authenticated backups and retrieve the archive.</p> https://cve.radiocsirt.org/vuln/ghsa-2mwq-hcmq-fqq4