Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 12:30:46 +0000 EUVD-2026-256976 https://cve.radiocsirt.org/vuln/euvd-2026-256976 EUVD-2026-256976 https://cve.radiocsirt.org/vuln/euvd-2026-256976 fkie_cve-2025-27224 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27224 <p>TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/fileupload endpoint to upload files. However, the application doesn&#39;t properly sanitize the input to this endpoint, ultimately allowing path traversal sequences to be included. This can be used to write to any filename with any file type at any location on the local server, ultimately allowing execution of arbitrary code.</p> <p>TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/fileupload endpoint to upload files. However, the application doesn&#39;t properly sanitize the input to this endpoint, ultimately allowing path traversal sequences to be included. This can be used to write to any filename with any file type at any location on the local server, ultimately allowing execution of arbitrary code.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-27224 GHSA-g458-fw23-89vc https://cve.radiocsirt.org/vuln/ghsa-g458-fw23-89vc <p>TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/fileupload endpoint to upload files. However, the application doesn&#39;t properly sanitize the input to this endpoint, ultimately allowing path traversal sequences to be included. This can be used to write to any filename with any file type at any location on the local server, ultimately allowing execution of arbitrary code.</p> <p>TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/fileupload endpoint to upload files. However, the application doesn&#39;t properly sanitize the input to this endpoint, ultimately allowing path traversal sequences to be included. This can be used to write to any filename with any file type at any location on the local server, ultimately allowing execution of arbitrary code.</p> https://cve.radiocsirt.org/vuln/ghsa-g458-fw23-89vc