https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 10:33:29 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-325428 EUVD-2026-325428 https://cve.radiocsirt.org/vuln/euvd-2026-325428 https://cve.radiocsirt.org/vuln/fkie_cve-2026-9506 <p>This vulnerability exists in Bagisto due to improper validation of user-supplied input in the ImageCacheController component. An unauthenticated remote attacker could exploit this vulnerability by sending crafted path traversal sequences through the filename parameter to access arbitrary files outside the intended directory on the targeted system.</p> <p>Successful exploitation of this vulnerability could allow an attacker to read arbitrary sensitive files on the targeted system.</p> <p>This vulnerability exists in Bagisto due to improper validation of user-supplied input in the ImageCacheController component. An unauthenticated remote attacker could exploit this vulnerability by sending crafted path traversal sequences through the filename parameter to access arbitrary files outside the intended directory on the targeted system.</p> <p>Successful exploitation of this vulnerability could allow an attacker to read arbitrary sensitive files on the targeted system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-9506 https://cve.radiocsirt.org/vuln/ghsa-qhcg-rw5x-vg94 <p>This vulnerability exists in Bagisto due to improper validation of user-supplied input in the ImageCacheController component. An unauthenticated remote attacker could exploit this vulnerability by sending crafted path traversal sequences through the filename parameter to access arbitrary files outside the intended directory on the targeted system.</p> <p>Successful exploitation of this vulnerability could allow an attacker to read arbitrary sensitive files on the targeted system.</p> <p>This vulnerability exists in Bagisto due to improper validation of user-supplied input in the ImageCacheController component. An unauthenticated remote attacker could exploit this vulnerability by sending crafted path traversal sequences through the filename parameter to access arbitrary files outside the intended directory on the targeted system.</p> <p>Successful exploitation of this vulnerability could allow an attacker to read arbitrary sensitive files on the targeted system.</p> https://cve.radiocsirt.org/vuln/ghsa-qhcg-rw5x-vg94