https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 13:42:31 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-275024 EUVD-2026-275024 https://cve.radiocsirt.org/vuln/euvd-2026-275024 https://cve.radiocsirt.org/vuln/fkie_cve-2018-25178 <p>Easyndexer 1.0 contains an arbitrary file download vulnerability that allows unauthenticated attackers to download sensitive files by manipulating the file parameter. Attackers can send POST requests to showtif.php with arbitrary file paths in the file parameter to retrieve system files like configuration and initialization files.</p> <p>Easyndexer 1.0 contains an arbitrary file download vulnerability that allows unauthenticated attackers to download sensitive files by manipulating the file parameter. Attackers can send POST requests to showtif.php with arbitrary file paths in the file parameter to retrieve system files like configuration and initialization files.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-25178 https://cve.radiocsirt.org/vuln/ghsa-r54p-xv62-5qww <p>Easyndexer 1.0 contains an arbitrary file download vulnerability that allows unauthenticated attackers to download sensitive files by manipulating the file parameter. Attackers can send POST requests to showtif.php with arbitrary file paths in the file parameter to retrieve system files like configuration and initialization files.</p> <p>Easyndexer 1.0 contains an arbitrary file download vulnerability that allows unauthenticated attackers to download sensitive files by manipulating the file parameter. Attackers can send POST requests to showtif.php with arbitrary file paths in the file parameter to retrieve system files like configuration and initialization files.</p> https://cve.radiocsirt.org/vuln/ghsa-r54p-xv62-5qww