https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 21:22:13 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-270140 EUVD-2026-270140 https://cve.radiocsirt.org/vuln/euvd-2026-270140 https://cve.radiocsirt.org/vuln/fkie_cve-2025-15375 <p>A flaw has been found in EyouCMS up to 1.7.7. The impacted element is the function unserialize of the file application/api/controller/Ajax.php of the component arcpagelist Handler. Executing a manipulation of the argument attstr can lead to deserialization. The attack can be launched remotely. The exploit has been published and may be used. The vendor is &#34;[a]cknowledging the existence of the vulnerability, we have completed the fix and will release a new version, v1.7.8&#34;.</p> <p>A flaw has been found in EyouCMS up to 1.7.7. The impacted element is the function unserialize of the file application/api/controller/Ajax.php of the component arcpagelist Handler. Executing a manipulation of the argument attstr can lead to deserialization. The attack can be launched remotely. The exploit has been published and may be used. The vendor is &#34;[a]cknowledging the existence of the vulnerability, we have completed the fix and will release a new version, v1.7.8&#34;.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-15375 https://cve.radiocsirt.org/vuln/ghsa-vwg9-2rf4-w4xc <p>A flaw has been found in EyouCMS up to 1.7.7. The impacted element is the function unserialize of the file application/api/controller/Ajax.php of the component arcpagelist Handler. Executing manipulation of the argument attstr can lead to deserialization. The attack can be launched remotely. The exploit has been published and may be used. The vendor is &#34;[a]cknowledging the existence of the vulnerability, we have completed the fix and will release a new version, v1.7.8&#34;.</p> <p>A flaw has been found in EyouCMS up to 1.7.7. The impacted element is the function unserialize of the file application/api/controller/Ajax.php of the component arcpagelist Handler. Executing manipulation of the argument attstr can lead to deserialization. The attack can be launched remotely. The exploit has been published and may be used. The vendor is &#34;[a]cknowledging the existence of the vulnerability, we have completed the fix and will release a new version, v1.7.8&#34;.</p> https://cve.radiocsirt.org/vuln/ghsa-vwg9-2rf4-w4xc