CVE-2026-12887

In affected versions of Octopus Server, a user with permission to upload a malicious nuget package is able to deploy a script step so the script executes outside of the parent directory...

CVE-2026-118019

Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 159...

CVE-2026-117566

EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and app/info.php that allows reading files outside the upload directory. Attackers can supply ../ sequences in the dw, history or img parameters to read files with allowed upload...

CVE-2026-117557

SDLimage through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerability in IMGLoadLBMIO in src/IMGlbm.c that skips bitplane count validation when HAM mode is set. Attackers can supply a crafted ILBM file with more than 8 HAM bitplanes to read past the colormap stack array,...

CVE-2026-117555

CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the loadbmp function of CImg.h caused by an integer overflow in the row byte count. Attackers can supply a crafted BMP file with a large header width that wraps dxbytes, causing crashes or heap memory disclosure into the decod...

DEBIAN-CVE-2026-117555

CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the loadbmp function of CImg.h caused by an integer overflow in the row byte count. Attackers can supply a crafted BMP file with a large header width that wraps dxbytes, causing crashes or heap memory disclosure into the decod...

UBUNTU-CVE-2026-118019

Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 159...

CVE-2026-118019

Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 159...

EUVD-2026-110917

Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 159...

CVE-2026-118019

A race condition and use-after-free vulnerability exists in the DOM: File component of Firefox and Thunderbird . This flaw was addressed in versions 159 of both products. Documentation indicates that specific Linux distributions and packages may be impacted, with some reports noting a lack of ven...

CVE-2026-118019 Race condition, use-after-free in the DOM: File component

Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 159...

Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads

Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as CVE-2026-86950 CVSS score: 8.8, is an out-of-bounds write affecting CoreGraphics that could result in arbitrary code execution when...

Exploit for CVE-2026-1306

CVE-2026-1306 — midi-Synth Proof-of-Concept PoC exploit...

Docmosis Tornado Unauthenticated Arbitrary File Write to Root RCE (storeTo=file: — Detect

Fingerprint / reachability check for Docmosis Tornado Unauthenticated Arbitrary File Write to Root RCE storeTo=file: → cron !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Docmosis Tornado Unauthenticated Arbitrary File Write to Root RCE storeTo=file: → cron""" from kittysploit import...

Maian Gallery — Authenticated Admin RCE via Unrestricted File Upload (upload_thu — Detect

Fingerprint / reachability check for Maian Gallery — Authenticated Admin RCE via Unrestricted File Upload uploadthumbnail !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Maian Gallery — Authenticated Admin RCE via Unrestricted File Upload uploadthumbnail""" from kittysploit import from...

Scan2x ScanWebClient — Unauthenticated File Upload → Webshell RCE — Detect

Fingerprint / reachability check for Scan2x ScanWebClient — Unauthenticated File Upload → Webshell RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Scan2x ScanWebClient — Unauthenticated File Upload → Webshell RCE""" from kittysploit import from lib.protocols.http.httpclient import...

SmartBear Collaborator Server 15.1.15101 - Path Traversal (Zip-Slip) in the DOOR — Detect

Fingerprint / reachability check for SmartBear Collaborator Server 15.1.15101 - Path Traversal Zip-Slip in the DOORS/Simulink Review-File Upload Leading to Groovy Server Page Execution CWE-22 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for SmartBear Collaborator Server 15.1.15101 - Pat...

mySCADA PRO Runtime unauthenticated upgrade command injection root RCE

POST /s.fcgi?upgrade= with X-File directory triggers systemchmod 777 /opt/myscada/fw/ as root. """mySCADA PRO Runtime unauthenticated /s.fcgi upgrade branch command injection.""" from future import annotations import re from urllib.parse import quote from kittysploit import from lib.exploit.handl...

MidVision RapidDeploy Remote Agent Unauthenticated Arbitrary File Write RCE

MidVision RapidDeploy Remote Agent Unauthenticated Arbitrary File Write RCE """MidVision RapidDeploy Remote Agent Unauthenticated Arbitrary File Write RCE""" from future import annotations from kittysploit import import base64 import os import subprocess import sys import tempfile import textwrap...

Maian Pal 2.1 - Unrestricted File Upload in the Administration Product Image Han — Detect

Fingerprint / reachability check for Maian Pal 2.1 - Unrestricted File Upload in the Administration Product Image Handler CWE-434 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Maian Pal 2.1 - Unrestricted File Upload in the Administration Product Image Handler CWE-434""" from...