https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 14:13:33 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-04769 bdu:2025-04769 https://cve.radiocsirt.org/vuln/bdu:2025-04769 https://cve.radiocsirt.org/vuln/euvd-2026-227842 EUVD-2026-227842 https://cve.radiocsirt.org/vuln/euvd-2026-227842 https://cve.radiocsirt.org/vuln/fkie_cve-2025-32028 <p>HAX CMS PHP allows you to manage your microsite universe with PHP backend. Multiple file upload functions within the HAX CMS PHP application call a ’save’ function in ’HAXCMSFile.php’. This save function uses a denylist to block specific file types from being uploaded to the server. This list is non-exhaustive and only blocks ’.php’, ’.sh’, ’.js’, and ’.css’ files. The existing logic causes the system to &#34;fail open&#34; rather than &#34;fail closed.&#34; This vulnerability is fixed in 10.0.3.</p> <p>HAX CMS PHP allows you to manage your microsite universe with PHP backend. Multiple file upload functions within the HAX CMS PHP application call a ’save’ function in ’HAXCMSFile.php’. This save function uses a denylist to block specific file types from being uploaded to the server. This list is non-exhaustive and only blocks ’.php’, ’.sh’, ’.js’, and ’.css’ files. The existing logic causes the system to &#34;fail open&#34; rather than &#34;fail closed.&#34; This vulnerability is fixed in 10.0.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-32028