CVE-2026-114403

PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attackers to instantiate arbitrary PHP objects by supplying a crafted presentation file. Attackers can upload a ZIP containing PhpPresentation.xml that IOFactory::load passes to unserialize,...

CVE-2026-114398

Trudesk through 1.2.11 contains an unrestricted file upload vulnerability that allows any authenticated user to place HTML or SVG files in the public webroot via the uploadlogo, uploadpagelogo and uploadfavicon endpoints. Attackers can spoof an image MIME type to upload script-bearing files serve...

Dulwich: Symlink Write-through In Checkout(paths=[]) Via Raw Os.open Bypasses All Symlink Protections

Summary Dulwich's "porcelain.checkoutpaths=..." code path writes files using raw "os.openfilepath, OWRONLY|OCREAT|OTRUNC, mode" followed by "f.writeobj.data". This code path does NOT call "buildfilefromblob" at all, completely bypassing any symlink protections including the unreleased d09f8af fix...

Exploit for CVE-2026-109618

php2shell — CVE-2026-109618 / CVE-2026-109619 Research Indepe...

Dulwich: Arbitrary File Write (RCE) On Windows Via Unvalidated Drive Letters In Tree Paths

Affected files "dulwich/index.py" Methods: "validatepathelementntfs", "treetofspath" "dulwich/porcelain/init.py" Method: "checkedworktreepath" Description / Summary A High-severity Path Traversal vulnerability exists in Dulwich's checkout logic when running on Windows. The functions responsible f...

Exploit for CVE-2026-39978

InvoicePlane — Arbitrary File Deletion CVE-2026-39978, CVE-20...

Vibe-Trading File-read Tools Expose Arbitrary Server-readable Files

Summary: 2 findings — "safeuserpath" accepts any path under "Path.home" or "Path.cwd", which inside the shipped root container resolves to "/root" and "/app" so all of root's home, including "/root/.ssh/idrsa", "/root/.aws/credentials", "/root/.kube/config", and "/app/agent/.env", passes the chec...

Exploit for CVE-2026-109618

php2shell-check !statushttps://img.shields.io/badge/status...

CVE-2026-114403 PHPOffice PHPPresentation through 1.2.0 Deserialization via Reader\Serialized::load

PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attackers to instantiate arbitrary PHP objects by supplying a crafted presentation file. Attackers can upload a ZIP containing PhpPresentation.xml that IOFactory::load passes to unserialize,...

CVE-2026-114403

PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attackers to instantiate arbitrary PHP objects by supplying a crafted presentation file. Attackers can upload a ZIP containing PhpPresentation.xml that IOFactory::load passes to unserialize,...

EUVD-2026-107246

Trudesk through 1.2.11 contains a path traversal vulnerability that allows administrators to delete arbitrary files by supplying encoded traversal sequences to DELETE /api/v1/backup/:backup. Attackers can also pass unvalidated file values to POST /api/v1/backup/restore to restore archives from, o...

CVE-2026-114398 Trudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogo

Trudesk through 1.2.11 contains an unrestricted file upload vulnerability that allows any authenticated user to place HTML or SVG files in the public webroot via the uploadlogo, uploadpagelogo and uploadfavicon endpoints. Attackers can spoof an image MIME type to upload script-bearing files serve...

CVE-2026-114398 Trudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogo

Trudesk through 1.2.11 contains an unrestricted file upload vulnerability that allows any authenticated user to place HTML or SVG files in the public webroot via the uploadlogo, uploadpagelogo and uploadfavicon endpoints. Attackers can spoof an image MIME type to upload script-bearing files serve...

EUVD-2026-107245

Trudesk through 1.2.11 contains an unrestricted file upload vulnerability that allows any authenticated user to place HTML or SVG files in the public webroot via the uploadlogo, uploadpagelogo and uploadfavicon endpoints. Attackers can spoof an image MIME type to upload script-bearing files serve...

CVE-2026-114398 Trudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogo

Trudesk through 1.2.11 contains an unrestricted file upload vulnerability that allows any authenticated user to place HTML or SVG files in the public webroot via the uploadlogo, uploadpagelogo and uploadfavicon endpoints. Attackers can spoof an image MIME type to upload script-bearing files serve...

CVE-2026-114398

The Trudesk application, through version 1.2.11 , is vulnerable to an unrestricted file upload (CWE-434) via the /settings/general/uploadlogo, uploadpagelogo, and uploadfavicon endpoints. This flaw allows any authenticated user to upload HTML or SVG files into the public webroot. By spoofing an i...

Dulwich: Symlink Directory Traversal In Filter-branch Index_filter Via Cross-commit State Persistence

Summary Dulwich's "filterbranch.py" "CommitFilter.applyindexfilter" is vulnerable to symlink directory traversal. When processing commit history, materialized tree entries including symlinks persist in the working directory between commits, allowing a symlink from an ancestor commit to redirect...

Exploit for CVE-2026-109618

php2shell-lab A local lab based on Docker, used to reproduce...

WordPress Your Dress theme <= 1.4.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Your Dress versions = 1.4.1...

EUVD-2026-107227

External control of file name or path and uncontrolled resource consumption in Apache bRPC version 1.18.0 on all platforms allows remote attackers who can reach the builtin service port to create directories and truncate/overwrite files with the privileges of the server process, or to hold the...