https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 10:02:44 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-316818 EUVD-2026-316818 https://cve.radiocsirt.org/vuln/euvd-2026-316818 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40040 <p>Pachno 1.0.6 contains an unrestricted file upload vulnerability that allows authenticated users to upload arbitrary file types by bypassing ineffective extension filtering to the /uploadfile endpoint. Attackers can upload executable files .php5 scripts to web-accessible directories and execute them to achieve remote code execution on the server.</p> <p>Pachno 1.0.6 contains an unrestricted file upload vulnerability that allows authenticated users to upload arbitrary file types by bypassing ineffective extension filtering to the /uploadfile endpoint. Attackers can upload executable files .php5 scripts to web-accessible directories and execute them to achieve remote code execution on the server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-40040 https://cve.radiocsirt.org/vuln/ghsa-m96c-c5gp-88rx <p>Pachno 1.0.6 contains an unrestricted file upload vulnerability that allows authenticated users to upload arbitrary file types by bypassing ineffective extension filtering to the /uploadfile endpoint. Attackers can upload executable files .php5 scripts to web-accessible directories and execute them to achieve remote code execution on the server.</p> <p>Pachno 1.0.6 contains an unrestricted file upload vulnerability that allows authenticated users to upload arbitrary file types by bypassing ineffective extension filtering to the /uploadfile endpoint. Attackers can upload executable files .php5 scripts to web-accessible directories and execute them to achieve remote code execution on the server.</p> https://cve.radiocsirt.org/vuln/ghsa-m96c-c5gp-88rx