148032 matches found
ZZZCMS ZZZPHP 1.6.3 – Remote PHP Code Execution (RCE)
ZZZCMS zzzphp v1.6.3 contains a remote code execution caused by lack of restrictions in inc/zzzfile.php, letting attackers execute arbitrary PHP code via a crafted URL in the plugins/ueditor/php/controller.php?action=catchimage source parameter, exploit requires attacker to send malicious URL and...
MINI-FQ7P-65HF-8CHG
Bulletin has no description...
CGA-VM96-FMV3-9RJ2
Bulletin has no description...
EUVD-2026-51624
Savon is a Ruby SOAP client. From 0.9.8 until 2.17.2, Savon::Model .alloperations interpolates attacker-controlled WSDL operation names into Ruby source passed to moduleeval, allowing Ruby code execution in the application process. This issue is fixed in version 2.17.2...
DEBIAN-CVE-2026-53503
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:convolution, , filter passes the user-controlled value to a C extension thumbor/ext/filters/convolution.c where it is used as a divisor for % and / without validating columns 0. When columns=0, the C...
DEBIAN-CVE-2026-53502
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, fileloader decodes percent-encoded path segments after its root-boundary validation, allowing traversal outside FILELOADERROOTPATH through watermark or frame filter input. This issue is fixed in 7.8.0...
DEBIAN-CVE-2026-53501
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor’s HMAC validation can be bypassed due to the use of Python’s .replace when removing the signature from the URL before validation. Since .replace removes all occurrences of the substring, an attacker can insert...
CGA-GXPC-C44R-7WC6
Bulletin has no description...
CGA-G3WQ-8CC7-HXQW
Bulletin has no description...
CVE-2026-54707
No description is available for this CVE...
DEBIAN-CVE-2026-54707
OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Prior to 2.6.4, OnionShare CLI/Desktop does not enforce the Receive mode disablefiles setting in cli/onionsharecli/web/receivemode.py, where...
DEBIAN-CVE-2026-62940
Bulletin has no description...
DEBIAN-CVE-2026-62313
Bulletin has no description...
DEBIAN-CVE-2026-62867
Bulletin has no description...
DEBIAN-CVE-2026-62941
Bulletin has no description...
DEBIAN-CVE-2026-63343
Bulletin has no description...
CGA-J97F-67C2-5VQM
Bulletin has no description...
CGA-9XCV-VM5R-3Q8V
Bulletin has no description...