https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 18:19:06 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-196058 EUVD-2026-196058 https://cve.radiocsirt.org/vuln/euvd-2026-196058 https://cve.radiocsirt.org/vuln/fkie_cve-2024-47836 <p>Admidio is an open-source user management solution. Prior to version 4.3.12, an unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server. Version 4.3.12 fixes this issue.</p> <p>Admidio is an open-source user management solution. Prior to version 4.3.12, an unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server. Version 4.3.12 fixes this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-47836 https://cve.radiocsirt.org/vuln/ghsa-7c4c-749j-pfp2 <p><strong>Affected:</strong> Packagist: admidio/admidio</p> <p>### Summary An unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server.</p> <p>### PoC 1. Go to https://www.admidio.org/demo_en/adm_program/modules/messages/messages.php 2. Click on Send Private Message 3. In the `Message` field, enter the following payload `Testing&lt;br&gt;&lt;h1&gt;HTML&lt;/h1&gt;&lt;br&gt;&lt;h2&gt;Injection&lt;/h2&gt;`</p> <p>&gt; </p> <p>4. Send the message 5. Open the message again</p> <p>&gt; </p> <p>### Impact 1. Data Theft: Stealing sensitive information like cookies, session tokens, and user credentials. 2. Session Hijacking: Gaining unauthorized access to user accounts. 3. Phishing: Tricking users into revealing sensitive information. 4. Website Defacement: Altering the appearance or content of the website. 5. Malware Distribution: Spreading malware to users&#39; devices. 6. Denial of Service (DoS): Overloading the server with malicious requests.</p> <p><strong>Affected:</strong> Packagist: admidio/admidio</p> <p>### Summary An unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server.</p> <p>### PoC 1. Go to https://www.admidio.org/demo_en/adm_program/modules/messages/messages.php 2. Click on Send Private Message 3. In the `Message` field, enter the following payload `Testing&lt;br&gt;&lt;h1&gt;HTML&lt;/h1&gt;&lt;br&gt;&lt;h2&gt;Injection&lt;/h2&gt;`</p> <p>&gt; </p> <p>4. Send the message 5. Open the message again</p> <p>&gt; </p> <p>### Impact 1. Data Theft: Stealing sensitive information like cookies, session tokens, and user credentials. 2. Session Hijacking: Gaining unauthorized access to user accounts. 3. Phishing: Tricking users into revealing sensitive information. 4. Website Defacement: Altering the appearance or content of the website. 5. Malware Distribution: Spreading malware to users&#39; devices. 6. Denial of Service (DoS): Overloading the server with malicious requests.</p> https://cve.radiocsirt.org/vuln/ghsa-7c4c-749j-pfp2