CVE-2026-92183

GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2026-92205 BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability

BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of BusyBox. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

EUVD-2026-107403

BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of BusyBox. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

CVE-2026-92205

A vulnerability exists in the libarchive component of BusyBox due to a path traversal flaw caused by the lack of proper validation of user-supplied paths during file operations. This allows a remote attacker to create arbitrary files in the context of the current user, provided they can induce th...

CVE-2026-92205

BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of BusyBox. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

CVE-2026-114262 file-management-system FileController.php store unrestricted upload

A vulnerability was determined in file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. Impacted is the function store of the file app/Http/Controllers/FileController.php. This manipulation of the argument File causes unrestricted upload. The attack may be initiated remotely. The explo...

CVE-2026-114262 file-management-system FileController.php store unrestricted upload

A vulnerability was determined in file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. Impacted is the function store of the file app/Http/Controllers/FileController.php. This manipulation of the argument File causes unrestricted upload. The attack may be initiated remotely. The explo...

CVE-2026-114262

The file-management-system (dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df) contains an unrestricted file upload vulnerability in the store function of app/Http/Controllers/FileController.php . This issue stems from the manipulation of the File argument, allowing for remote attacks. The exploit has bee...

EUVD-2026-107394

A vulnerability was determined in file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. Impacted is the function store of the file app/Http/Controllers/FileController.php. This manipulation of the argument File causes unrestricted upload. The attack may be initiated remotely. The explo...

CVE-2026-114261 MomoTommy file-management-system Files API FileController.php destroy missing authentication

A vulnerability was found in MomoTommy file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. This issue affects the function index/store/update/destroy of the file app/Http/Controllers/FileController.php of the component Files API. The manipulation of the argument Request results in...

CVE-2026-114261 MomoTommy file-management-system Files API FileController.php destroy missing authentication

A vulnerability was found in MomoTommy file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. This issue affects the function index/store/update/destroy of the file app/Http/Controllers/FileController.php of the component Files API. The manipulation of the argument Request results in...

EUVD-2026-107367

A vulnerability was found in MomoTommy file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. This issue affects the function index/store/update/destroy of the file app/Http/Controllers/FileController.php of the component Files API. The manipulation of the argument Request results in...

CVE-2026-114261

A vulnerability exists in the MomoTommy file-management-system within the Files API component. The issue affects the index/store/update/destroy functions in the file app/Http/Controllers/FileController.php. Due to missing authentication resulting from the manipulation of the Request argument, an ...

CVE-2026-114261 MomoTommy file-management-system Files API FileController.php destroy missing authentication

A vulnerability was found in MomoTommy file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. This issue affects the function index/store/update/destroy of the file app/Http/Controllers/FileController.php of the component Files API. The manipulation of the argument Request results in...

UBUNTU-CVE-2026-112946

Vite is a frontend tooling framework for JavaScript. Prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3, import analysis can record a root-relative browser URL in safeModulePaths instead of the cleaned resolved module identifier. On a network-accessible, non-Windows development server, an imported...

npm: Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine

npm: Vite: Files outside server.fs.allow could be served when project paths match system paths on non-Windows machine vulnerability discovered by ? in WordPress npm vite versions = 6.4.3...

npm: Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine

npm: Vite: Files outside server.fs.allow could be served when project paths match system paths on non-Windows machine vulnerability discovered by ? in WordPress npm vite-plus versions = 1.0.0...

CVE-2026-114260 oretnom23 file-management-system-php AJAX ajax.php delete_folder missing authentication

A vulnerability has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This vulnerability affects the function deletefolder of the file ajax.php of the component AJAX Handler. The manipulation of the argument ID leads to missing authentication. The...

EUVD-2026-107364

A vulnerability has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This vulnerability affects the function deletefolder of the file ajax.php of the component AJAX Handler. The manipulation of the argument ID leads to missing authentication. The...

CVE-2026-114260 oretnom23 file-management-system-php AJAX ajax.php delete_folder missing authentication

A vulnerability has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This vulnerability affects the function deletefolder of the file ajax.php of the component AJAX Handler. The manipulation of the argument ID leads to missing authentication. The...