https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 01:12:19 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-264833 EUVD-2026-264833 https://cve.radiocsirt.org/vuln/euvd-2026-264833 https://cve.radiocsirt.org/vuln/fkie_cve-2026-21450 <p>Bagisto is an open source laravel eCommerce platform. Versions prior to 2.3.10 are vulnerable to server-side template injection via type parameter, which can lead to remote code execution or another exploitation. Version 2.3.10 fixes the issue.</p> <p>Bagisto is an open source laravel eCommerce platform. Versions prior to 2.3.10 are vulnerable to server-side template injection via type parameter, which can lead to remote code execution or another exploitation. Version 2.3.10 fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-21450 https://cve.radiocsirt.org/vuln/ghsa-9hvg-qw5q-wqwp <p><strong>Affected:</strong> Packagist: bagisto/bagisto</p> <p>### Summary SSTI is possible in Bagisto via type parameter can lead to RCE and other exploitations.</p> <p>### Details 1. Go to `http://127.0.0.1:8000/admin/reporting/products/view?type={{7*7}}`</p> <p>&lt;img width=&#34;1251&#34; height=&#34;282&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/652e96f4-631e-4322-8561-63f4d897a480&#34; /&gt;</p> <p>### Impact Can lead to RCE, command injection.</p> <p><strong>Affected:</strong> Packagist: bagisto/bagisto</p> <p>### Summary SSTI is possible in Bagisto via type parameter can lead to RCE and other exploitations.</p> <p>### Details 1. Go to `http://127.0.0.1:8000/admin/reporting/products/view?type={{7*7}}`</p> <p>&lt;img width=&#34;1251&#34; height=&#34;282&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/652e96f4-631e-4322-8561-63f4d897a480&#34; /&gt;</p> <p>### Impact Can lead to RCE, command injection.</p> https://cve.radiocsirt.org/vuln/ghsa-9hvg-qw5q-wqwp