Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:52:02 +0000 EUVD-2026-324068 https://cve.radiocsirt.org/vuln/euvd-2026-324068 EUVD-2026-324068 https://cve.radiocsirt.org/vuln/euvd-2026-324068 fkie_cve-2026-8726 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8726 <p>The extension fails to properly sanitize user input before using it in a database query. As a result, an unauthenticated attacker can inject arbitrary SQL through a URL parameter on pages using the &#34;Date Menu of news articles&#34; plugin. Exploitation requires the &#34;Date Menu of news articles&#34; plugin to be in use and the TypoScript/Plugin setting disableOverrideDemand not to be enabled.</p> <p>The extension fails to properly sanitize user input before using it in a database query. As a result, an unauthenticated attacker can inject arbitrary SQL through a URL parameter on pages using the &#34;Date Menu of news articles&#34; plugin. Exploitation requires the &#34;Date Menu of news articles&#34; plugin to be in use and the TypoScript/Plugin setting disableOverrideDemand not to be enabled.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-8726 GHSA-g868-j3qm-4j28 — georgringer/news has SQL Injection in extension "News system" (news) https://cve.radiocsirt.org/vuln/ghsa-g868-j3qm-4j28 <p><strong>Affected:</strong> Packagist: georgringer/news</p> <p>The extension fails to properly sanitize user input before using it in a database query. As a result, an unauthenticated attacker can inject arbitrary SQL through a URL parameter on pages using the &#34;Date Menu of news articles&#34; plugin. Exploitation requires the &#34;Date Menu of news articles&#34; plugin to be in use and the TypoScript/Plugin setting disableOverrideDemand not to be enabled.</p> <p><strong>Affected:</strong> Packagist: georgringer/news</p> <p>The extension fails to properly sanitize user input before using it in a database query. As a result, an unauthenticated attacker can inject arbitrary SQL through a URL parameter on pages using the &#34;Date Menu of news articles&#34; plugin. Exploitation requires the &#34;Date Menu of news articles&#34; plugin to be in use and the TypoScript/Plugin setting disableOverrideDemand not to be enabled.</p> https://cve.radiocsirt.org/vuln/ghsa-g868-j3qm-4j28 WID-SEC-W-2026-1585 — TYPO3 Extensions: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1585 <p>Ein Angreifer kann mehrere Schwachstellen in TYPO3 Extensions ausnutzen, um beliebigen Programmcode auszuführen, um einen SQL-Injection Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in TYPO3 Extensions ausnutzen, um beliebigen Programmcode auszuführen, um einen SQL-Injection Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1585