PT-2026-84036

Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's media handler in src/Cms/Media.php allowed KirbyCmsMedia::thumb to append a path-bearing filename to a validated parent media directory. On nginx, PHP's built-in server, or Apache...

PT-2026-76809

SWE-agent's trajectory inspector sweagent inspector, confirmed in v1.1.0, is an HTTP server that joins request paths to the trajectory directory in its /trajectory/ handler without rejecting parent-directory '..' references, bypassing the built-in path sanitization. The server binds all interface...

WordPress Mobile Pack 2.1.2 Information Disclosure

Title: Information Exposure Vulnerability in WordPress Mobile Pack Wordpress Plugin v2.1.2 and below Submitter: Nitin Venkatesh Product: WordPress Mobile Pack Wordpress Plugin Product URL: https://wordpress.org/plugins/wordpress-mobile-pack/ Vulnerability Type: Information ExposureCWE-200 Affecte...