https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-09T10:45:42.002657+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2019-9842 fkie_cve-2019-9842 2026-10-09T10:45:42.049870+00:00

madskristensen MiniBlog through 2018-05-18 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL, because SaveFilesToDisk in app_code/handlers/PostHandler.cs writes a decoded base64 string to a file without validating the extension.

 https://vulnerability.circl.lu/vuln/ghsa-q26p-9rm7-92f4 GHSA-q26p-9rm7-92f4 2026-10-09T10:45:42.049973+00:00

madskristensen MiniBlog through 2018-05-18 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL, because SaveFilesToDisk in app_code/handlers/PostHandler.cs writes a decoded base64 string to a file without validating the extension.

 https://vulnerability.circl.lu/vuln/gsd-2019-9842 gsd-2019-9842 2026-10-09T10:45:42.050009+00:00 gsd-2019-9842