Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 04:49:41 +0000 EUVD-2026-337708 https://cve.radiocsirt.org/vuln/euvd-2026-337708 EUVD-2026-337708 https://cve.radiocsirt.org/vuln/euvd-2026-337708 fkie_cve-2023-53895 https://cve.radiocsirt.org/vuln/fkie_cve-2023-53895 <p>PimpMyLog 1.7.14 contains an improper access control vulnerability that allows remote attackers to create admin accounts without authorization through the configuration endpoint. Attackers can exploit the unsanitized username field to inject malicious JavaScript, create a hidden backdoor account, and potentially access sensitive server-side log information and environmental variables.</p> <p>PimpMyLog 1.7.14 contains an improper access control vulnerability that allows remote attackers to create admin accounts without authorization through the configuration endpoint. Attackers can exploit the unsanitized username field to inject malicious JavaScript, create a hidden backdoor account, and potentially access sensitive server-side log information and environmental variables.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-53895 GHSA-v3r2-q367-cjqr https://cve.radiocsirt.org/vuln/ghsa-v3r2-q367-cjqr <p>PimpMyLog 1.7.14 contains an improper access control vulnerability that allows remote attackers to create admin accounts without authorization through the configuration endpoint. Attackers can exploit the unsanitized username field to inject malicious JavaScript, create a hidden backdoor account, and potentially access sensitive server-side log information and environmental variables.</p> <p>PimpMyLog 1.7.14 contains an improper access control vulnerability that allows remote attackers to create admin accounts without authorization through the configuration endpoint. Attackers can exploit the unsanitized username field to inject malicious JavaScript, create a hidden backdoor account, and potentially access sensitive server-side log information and environmental variables.</p> https://cve.radiocsirt.org/vuln/ghsa-v3r2-q367-cjqr