CVE-2026-84441 Piwigo Image Derivative i.php path traversal

A security vulnerability has been detected in Piwigo up to 16.3.0. Affected by this issue is some unknown functionality of the file i.php of the component Image Derivative Handler. The manipulation leads to path traversal. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-84441 Piwigo Image Derivative i.php path traversal

A security vulnerability has been detected in Piwigo up to 16.3.0. Affected by this issue is some unknown functionality of the file i.php of the component Image Derivative Handler. The manipulation leads to path traversal. Remote exploitation of the attack is possible. The exploit has been...

EUVD-2026-69819

A security vulnerability has been detected in Piwigo up to 16.3.0. Affected by this issue is some unknown functionality of the file i.php of the component Image Derivative Handler. The manipulation leads to path traversal. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-84441

Piwigo versions up to 16.3.0 are affected by a path traversal vulnerability in the Image Derivative Handler component, specifically in the file i.php . The vulnerable functionality is described as unknown, but manipulation of it allows an unauthenticated remote attacker to traverse the filesystem...

PT-2026-84884

A vulnerability was identified in simular-ai Agent-S up to 0.3.2. Affected by this issue is some unknown functionality of the file grounding.py of the component Model-generated GUI Action Execution Workflow. The manipulation leads to denial of service. Remote exploitation of the attack is possibl...

PT-2026-84593

A security vulnerability has been detected in Piwigo up to 16.3.0. Affected by this issue is some unknown functionality of the file i.php of the component Image Derivative Handler. The manipulation leads to path traversal. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-84441: Improper Limitation of a Pathname to a Restricted Directory

A security vulnerability has been detected in Piwigo up to 16.3.0. Affected by this issue is some unknown functionality of the file i.php of the component Image Derivative Handler. The manipulation leads to path traversal. Remote exploitation of the attack is possible. The exploit has been...

The vulnerability of the Ozone component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Ozone component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

The vulnerability of the NLTK library package for symbolic and statistical processing of natural language lies in its insecure initialization of resources, which allows attackers to bypass existing security mechanisms.

The vulnerability of the NLTK library package for symbolic and statistical processing of natural language is related to insecure initialization of resources. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...

The vulnerability of the enrichContext() function in the Budibase software allows a hacker to execute arbitrary code.

The vulnerability of the enrichContext function in Budibase software lies in the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the sub_42EF14() function in D-Link DCS-932L microprogrammed camera software allows a intruder to execute arbitrary commands.

The vulnerability of the sub42EF14 function /bin/alphapd of the D-Link DCS-932L microprogrammed surveillance camera is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

The vulnerability of the Microsoft Exchange Server mail server relates to the possibility of bypassing authentication procedures, allowing attackers to increase their privileges.

The vulnerability of Microsoft Exchange Server is related to the possibility of bypassing the authentication process. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the Network component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the Network component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to compromise data integrity remotely...

The vulnerability of the TSIG authentication algorithm used by the coredns server allows attackers to increase their privileges.

The vulnerability of the TSIG authentication algorithm used by coredns DNS servers is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerabilities of the software for SmartZone, ZoneDirector, and SmartCell Gateway controllers are related to errors in verifying cryptographic signatures. These vulnerabilities allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the SmartZone, ZoneDirector, and SmartCell Gateway wireless network controller software are related to errors in checking the cryptographic signature. Exploiting these vulnerabilities can allow an attacker operating remotely to compromise the confidentiality, integrity, and...

Linux Distros Unpatched Vulnerability : CVE-2026-84143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or...

Linux Distros Unpatched Vulnerability : CVE-2026-84142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Internally found bugs present in Thunderbird 154. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume tha...

Linux-ExploitDev

Linux Kernel Exploitation Notes In progress — notes are a...

EUVD-2026-55971

TYPO3 CMS - Broken Access Control in Backend and Install Tool...

CVE-2026-73764 Authentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Disruption in AOS-CX

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of...