Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 18:14:07 +0000 CVE-2024-58298 — Compuware iStrobe Web 20.13 Pre-Auth Remote Code Execution via File Upload https://cve.radiocsirt.org/vuln/cve-2024-58298 <p><strong>Affected:</strong> BMC Software Compuware iStrobe Web</p> <p>Compuware iStrobe Web 20.13 contains a pre-authentication remote code execution vulnerability that allows unauthenticated attackers to upload malicious JSP files through a path traversal in the file upload form. Attackers can exploit the &#39;fileName&#39; parameter to upload a web shell and execute arbitrary commands by sending POST requests to the uploaded JSP endpoint.</p> <p><strong>Affected:</strong> BMC Software Compuware iStrobe Web</p> <p>Compuware iStrobe Web 20.13 contains a pre-authentication remote code execution vulnerability that allows unauthenticated attackers to upload malicious JSP files through a path traversal in the file upload form. Attackers can exploit the &#39;fileName&#39; parameter to upload a web shell and execute arbitrary commands by sending POST requests to the uploaded JSP endpoint.</p> https://cve.radiocsirt.org/vuln/cve-2024-58298