Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 21:22:12 +0000 CVE-2025-12140 — RCE in Wirtualna Uczelnia https://cve.radiocsirt.org/vuln/cve-2025-12140 <p><strong>Affected:</strong> Simple SA Wirtualna Uczelnia</p> <p>The application contains an insecure &#39;redirectToUrl&#39; mechanism that incorrectly processes the value of the &#39;redirectUrlParameter&#39; parameter. The application interprets the entered string of characters as a Java expression, allowing an unauthenticated attacer to perform arbitrary code execution. This issue was fixed in version wu#2016.1.5513#0#20251014_113353</p> <p><strong>Affected:</strong> Simple SA Wirtualna Uczelnia</p> <p>The application contains an insecure &#39;redirectToUrl&#39; mechanism that incorrectly processes the value of the &#39;redirectUrlParameter&#39; parameter. The application interprets the entered string of characters as a Java expression, allowing an unauthenticated attacer to perform arbitrary code execution. This issue was fixed in version wu#2016.1.5513#0#20251014_113353</p> https://cve.radiocsirt.org/vuln/cve-2025-12140