https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 13 Nov 2026 00:14:09 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-107356 <p>U.S. Geological Survey Area Species Management Research Program (ARMI) accepts any uploaded file and stores the file under &#39;/uploads/{upload-file}&#39;. A remote, authenticated attacker could upload a crafted PHP file that executes and returns command output from the server when accessed. Fixed on 2026-07-20.</p> <p>U.S. Geological Survey Area Species Management Research Program (ARMI) accepts any uploaded file and stores the file under &#39;/uploads/{upload-file}&#39;. A remote, authenticated attacker could upload a crafted PHP file that executes and returns command output from the server when accessed. Fixed on 2026-07-20.</p> https://db.gcve.eu/vuln/fkie_cve-2026-107356 https://db.gcve.eu/vuln/ghsa-fvc5-q667-w85g <p>U.S. Geological Survey Area Species Management Research Program (ARMI) accepts any uploaded file and stores the file under &#39;/uploads/{upload-file}&#39;. A remote, authenticated attacker could upload a crafted PHP file that executes and returns command output from the server when accessed. Fixed on 2026-07-20.</p> <p>U.S. Geological Survey Area Species Management Research Program (ARMI) accepts any uploaded file and stores the file under &#39;/uploads/{upload-file}&#39;. A remote, authenticated attacker could upload a crafted PHP file that executes and returns command output from the server when accessed. Fixed on 2026-07-20.</p> https://db.gcve.eu/vuln/ghsa-fvc5-q667-w85g https://db.gcve.eu/vuln/va-26-313-01 <p>U.S. Geological Survey Area Species Management Research Program (ARMI) accepts any uploaded file and stores the file under &#39;/uploads/{upload-file}&#39;. A remote, authenticated attacker could upload a crafted PHP file that executes and returns command output from the server when accessed. Fixed on 2026-07-20.</p> <p>U.S. Geological Survey Area Species Management Research Program (ARMI) accepts any uploaded file and stores the file under &#39;/uploads/{upload-file}&#39;. A remote, authenticated attacker could upload a crafted PHP file that executes and returns command output from the server when accessed. Fixed on 2026-07-20.</p> https://db.gcve.eu/vuln/va-26-313-01