https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T20:24:13.763829+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2016-6255 CVE-2016-6255 2026-10-03T20:24:14.001252+00:00

Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered handler.

 https://vulnerability.circl.lu/vuln/usn-4794-1 USN-4794-1 — libupnp vulnerabilities 2026-10-03T20:24:14.001349+00:00

Affected: Ubuntu:Pro:16.04:LTS: libupnp

Matthew Garrett discovered that libupnp mishandled POST requests by default. An attacker could use this vulnerability to write files to arbitrary locations in the victim's filesystem, possibly as root. (CVE-2016-6255)

It was discovered that libupnp mishandled certain input. A remote attacker could use this vulnerability to cause a denial of service (crash) or possibly execute arbitrary code. (CVE-2016-8863)