https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:03:17 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-06791 bdu:2025-06791 https://cve.radiocsirt.org/vuln/bdu:2025-06791 https://cve.radiocsirt.org/vuln/euvd-2026-241405 EUVD-2026-241405 https://cve.radiocsirt.org/vuln/euvd-2026-241405 https://cve.radiocsirt.org/vuln/fkie_cve-2025-48828 <p>Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the template engine. By crafting template code in an alternative PHP function invocation syntax, such as the &#34;var_dump&#34;(&#34;test&#34;) syntax, attackers can bypass security checks and execute arbitrary PHP code, as exploited in the wild in May 2025.</p> <p>Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the template engine. By crafting template code in an alternative PHP function invocation syntax, such as the &#34;var_dump&#34;(&#34;test&#34;) syntax, attackers can bypass security checks and execute arbitrary PHP code, as exploited in the wild in May 2025.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-48828 https://cve.radiocsirt.org/vuln/ghsa-58pj-rcxg-3vhg <p>Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the template engine. By crafting template code in an alternative PHP function invocation syntax, such as the &#34;var_dump&#34;(&#34;test&#34;) syntax, attackers can bypass security checks and execute arbitrary PHP code.</p> <p>Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the template engine. By crafting template code in an alternative PHP function invocation syntax, such as the &#34;var_dump&#34;(&#34;test&#34;) syntax, attackers can bypass security checks and execute arbitrary PHP code.</p> https://cve.radiocsirt.org/vuln/ghsa-58pj-rcxg-3vhg https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1148 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in vBulletin Connect ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in vBulletin Connect ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1148