https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 11:27:43 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-280920 EUVD-2026-280920 https://cve.radiocsirt.org/vuln/euvd-2026-280920 https://cve.radiocsirt.org/vuln/fkie_cve-2023-53930 <p>ProjectSend r1605 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to download private files by manipulating the download ID parameter. Attackers can access any user&#39;s private files by changing the &#39;id&#39; parameter in the download request to process.php.</p> <p>ProjectSend r1605 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to download private files by manipulating the download ID parameter. Attackers can access any user&#39;s private files by changing the &#39;id&#39; parameter in the download request to process.php.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-53930 https://cve.radiocsirt.org/vuln/ghsa-gc6r-xc3x-9vvg <p>ProjectSend r1605 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to download private files by manipulating the download ID parameter. Attackers can access any user&#39;s private files by changing the &#39;id&#39; parameter in the download request to process.php.</p> <p>ProjectSend r1605 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to download private files by manipulating the download ID parameter. Attackers can access any user&#39;s private files by changing the &#39;id&#39; parameter in the download request to process.php.</p> https://cve.radiocsirt.org/vuln/ghsa-gc6r-xc3x-9vvg