DEBIAN-CVE-2026-116612

A flaw was found in GStreamer Editing Services gst-editing-services. A GES project file can embed an arbitrary GStreamer pipeline description as an effect definition. When such a file is loaded, either explicitly by an editing application or automatically by a media player or file-manager...

CVE-2026-116612

A flaw was found in GStreamer Editing Services gst-editing-services. A GES project file can embed an arbitrary GStreamer pipeline description as an effect definition. When such a file is loaded, either explicitly by an editing application or automatically by a media player or file-manager...

CVE-2026-115908

zip is a zip library for Rust that supports reading and writing simple ZIP files. From 7.2.0 until 9.0.0, ZipArchive::extract and ZipArchive::extractunwrappedrootdir use safepreparepath in src/read/zipfile.rs and simplifiedcomponents in src/path.rs to validate symbolic link targets with a lexical...

UBUNTU-CVE-2026-116612

A flaw was found in GStreamer Editing Services gst-editing-services. A GES project file can embed an arbitrary GStreamer pipeline description as an effect definition. When such a file is loaded, either explicitly by an editing application or automatically by a media player or file-manager...

CVE-2026-116612

A flaw was found in GStreamer Editing Services gst-editing-services. A GES project file can embed an arbitrary GStreamer pipeline description as an effect definition. When such a file is loaded, either explicitly by an editing application or automatically by a media player or file-manager...

UBUNTU-CVE-2026-115908

zip is a zip library for Rust that supports reading and writing simple ZIP files. From 7.2.0 until 9.0.0, ZipArchive::extract and ZipArchive::extractunwrappedrootdir use safepreparepath in src/read/zipfile.rs and simplifiedcomponents in src/path.rs to validate symbolic link targets with a lexical...

CVE-2026-115905

zip is a zip library for Rust that supports reading and writing simple ZIP files. Through 9.0.4, ZipArchive treats Central Directory File Header filenames as authoritative while ZipStreamReader extracts using Local File Header filenames without reconciling the duplicate metadata in...

CVE-2026-115908

zip is a zip library for Rust that supports reading and writing simple ZIP files. From 7.2.0 until 9.0.0, ZipArchive::extract and ZipArchive::extractunwrappedrootdir use safepreparepath in src/read/zipfile.rs and simplifiedcomponents in src/path.rs to validate symbolic link targets with a lexical...

CVE-2026-98897

A flaw was found in the Linux kernel's ksmbd Kernel Server Message Block daemon. An authenticated remote user can cause a Denial of Service DoS by initiating conflicting file access requests on cached file leases. Because ksmbd holds an internal read lock while waiting for a lease break...

Joomla Helix3 <= 3.1.1 - Unauthenticated Arbitrary File Write (CVE-2026-49049)

CVE-2026-49049 in JoomShaper Helix3 = 3.1.1: unauthenticated file write via comajax helix3 save path traversal in layoutName, arbitrary file delete via remove, and template parameter overwrite via import Helix3 v3.x. The save action always appends .json — no reliable shell; use for authorized fil...

crawl4ai CVE-2026-91940 arbitrary file write

CVE-2026-91940 crawl4ai 0.9.3: POST /crawl with PDFContentScrapingStrategy and attacker-controlled imagesavedir writes extracted image streams to disk. Hosts a minimal PDF on lhost:lport and triggers /crawl. Patched versions return HTTP 400 not permitted. Requires API token on 0.9.2. !/usr/bin/en...

Grafana CVE-2024-9264 SQL Expressions RCE

CVE-2024-9264 Grafana 11.0.0–11.2.0: Viewer+ can run SQL Expressions with DuckDB readtext / shellfs for arbitrary file read and command execution when duckdb shellfs is available in PATH. !/usr/bin/env python3 -- coding: utf-8 -- """Grafana CVE-2024-9264 SQL Expressions DuckDB authenticated RCE /...

Adminer CVE-2020-35572 arbitrary file read

CVE-2020-35572 Adminer = 4.6.2: server driver makes Adminer connect outbound to attacker MySQL; LOAD DATA LOCAL INFILE pulls target files. !/usr/bin/env python3 -- coding: utf-8 -- """Adminer CVE-2020-35572 rogue-MySQL LOAD DATA LOCAL file read.""" from future import annotations import re from...

Joomla DJ-Classifieds CVE-2026-61424 detect

Detects comdjclassifieds imageupload task CVE-2026-61424: unauthenticated file write to tmp/djupload/ in DJ-Classifieds 3.9.5. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Joomla DJ-Classifieds CVE-2026-61424 imageupload exposure.""" from kittysploit import from lib.protocols.http.httpclie...

Apache Struts2 CVE-2024-53677 Upload Detect

Probes common Struts file-upload .action endpoints for CVE-2024-53677 chain. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Struts2 CVE-2024-53677 file upload action fingerprint.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

ImageMagick CVE-2022-44268 PNG profile file read

CVE-2022-44268 ImageMagick = 7.1.0-49: tEXt profile chunk treats value as filename; leaked bytes appear in output PNG when the app processes attacker PNG upload + download workflow. !/usr/bin/env python3 -- coding: utf-8 -- """ImageMagick CVE-2022-44268 PNG profile arbitrary file read.""" from...

image-downloader CVE-2026-103648 path traversal

CVE-2026-103648 npm image-downloader 4.3.1: when a Node app passes a user-controlled URL to download.image, percent-encoded ../ in the URL path survives basename and writes outside the intended dest directory. Starts a short-lived payload HTTP server on lhost:lport and triggers GET...

Security Bulletin: Protection Mechanism Failure vulnerability affects IBM Sterling File Gateway (CVE-2026-18668)

Summary IBM Sterling File Gateway has addressed this security vulnerability Vulnerability Details CVEID:CVE-2026-18668 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to perform protocol downgrade attacks due to a security misconfiguration. CWE:CWE-693:...

Security Bulletin: Multiple Security Vulnerabilities in Jackson affect IBM Sterling File Gateway

Summary IBM Sterling File Gateway has addressed these security vulnerabilities Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4,...

Security Bulletin: A Security Vulnerability in Apache Struts affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-73633)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed this security vulnerability Vulnerability Details CVEID:CVE-2026-73633 DESCRIPTION: Uncontrolled resource consumption vulnerability in the JSON plugin of Apache Struts. When an application is configured to populate...