https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 05:49:37 +0000 https://cve.radiocsirt.org/vuln/cve-2025-34061 <p><strong>Affected:</strong> Henan Xiaopi Security Technology Co., Ltd. PHPStudy</p> <p>A backdoor in PHPStudy versions 2016 through 2018 allows unauthenticated remote attackers to execute arbitrary PHP code on affected installations. The backdoor listens for base64-encoded PHP payloads in the Accept-Charset HTTP header of incoming requests, decodes and executes the payload without proper validation. This leads to remote code execution as the web server user, compromising the affected system.</p> <p><strong>Affected:</strong> Henan Xiaopi Security Technology Co., Ltd. PHPStudy</p> <p>A backdoor in PHPStudy versions 2016 through 2018 allows unauthenticated remote attackers to execute arbitrary PHP code on affected installations. The backdoor listens for base64-encoded PHP payloads in the Accept-Charset HTTP header of incoming requests, decodes and executes the payload without proper validation. This leads to remote code execution as the web server user, compromising the affected system.</p> https://cve.radiocsirt.org/vuln/cve-2025-34061