https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 05:55:49 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-380967 EUVD-2026-380967 https://cve.radiocsirt.org/vuln/euvd-2026-380967 https://cve.radiocsirt.org/vuln/fkie_cve-2021-47899 <p>YetiShare File Hosting Script 5.1.0 contains a server-side request forgery vulnerability that allows attackers to read local system files through the remote file upload feature. Attackers can exploit the url parameter in the url_upload_handler endpoint to access sensitive files like /etc/passwd by using file:/// protocol.</p> <p>YetiShare File Hosting Script 5.1.0 contains a server-side request forgery vulnerability that allows attackers to read local system files through the remote file upload feature. Attackers can exploit the url parameter in the url_upload_handler endpoint to access sensitive files like /etc/passwd by using file:/// protocol.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-47899 https://cve.radiocsirt.org/vuln/ghsa-38wv-wfx6-3cx2 <p>YetiShare File Hosting Script 5.1.0 contains a server-side request forgery vulnerability that allows attackers to read local system files through the remote file upload feature. Attackers can exploit the url parameter in the url_upload_handler endpoint to access sensitive files like /etc/passwd by using file:/// protocol.</p> <p>YetiShare File Hosting Script 5.1.0 contains a server-side request forgery vulnerability that allows attackers to read local system files through the remote file upload feature. Attackers can exploit the url parameter in the url_upload_handler endpoint to access sensitive files like /etc/passwd by using file:/// protocol.</p> https://cve.radiocsirt.org/vuln/ghsa-38wv-wfx6-3cx2