https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 11:50:21 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-321146 EUVD-2026-321146 https://cve.radiocsirt.org/vuln/euvd-2026-321146 https://cve.radiocsirt.org/vuln/fkie_cve-2023-53888 <p>Zomplog 3.9 contains a remote code execution vulnerability that allows authenticated attackers to inject and execute arbitrary PHP code through file manipulation endpoints. Attackers can upload files (such as JavaScript) and rename them to .php via the saveE and rename actions, then execute the resulting PHP payload to run system commands.</p> <p>Zomplog 3.9 contains a remote code execution vulnerability that allows authenticated attackers to inject and execute arbitrary PHP code through file manipulation endpoints. Attackers can upload files (such as JavaScript) and rename them to .php via the saveE and rename actions, then execute the resulting PHP payload to run system commands.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-53888 https://cve.radiocsirt.org/vuln/ghsa-9g2h-fh68-3p2v <p>Zomplog 3.9 contains a remote code execution vulnerability that allows authenticated attackers to inject and execute arbitrary PHP code through file manipulation endpoints. Attackers can upload malicious JavaScript files, rename them to PHP, and execute system commands by exploiting the saveE and rename actions in the application.</p> <p>Zomplog 3.9 contains a remote code execution vulnerability that allows authenticated attackers to inject and execute arbitrary PHP code through file manipulation endpoints. Attackers can upload malicious JavaScript files, rename them to PHP, and execute system commands by exploiting the saveE and rename actions in the application.</p> https://cve.radiocsirt.org/vuln/ghsa-9g2h-fh68-3p2v