111356 matches found
CVE-2026-109398
Gumlet php-image-resize before 3.0.1 contains a denial of service vulnerability because the ImageResize constructor in lib/ImageResize.php passes images to GD imagecreatefrom functions without pixel limits. Remote attackers can upload small, highly compressed images that decode to large bitmaps,...
CVE-2026-107248
Thelia 3.0.0's back-office Email/Messages feature contains a server‑side template injection SSTI flaw that allows any authenticated user with the “Messages” permission to supply unsandboxed Twig templates, which are then compiled and executed as raw code. By modifying Message content, an attacker...
EUVD-2026-97649
Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing statements with a UTF-8 byte-order mark. Attackers can attach a database file at a PHP-served path and create a table named with PH...
CVE-2026-109318
The Grav Git Sync plugin, versions 1.0.2 through 3.4.12 , is vulnerable to command injection when the gravuser or gravfull author modes are enabled. Authenticated content editors can execute OS commands by injecting shell substitutions into profile fields, such as username , full name , or email ...
CVE-2026-109318 Grav Git Sync 1.0.2 through 3.4.12 Command Injection via Commit Author
Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell substitutions into profile fields. When the gravuser or gravfull author mode is enabled, attackers can set a malicious username, full...
EUVD-2026-97620
Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell substitutions into profile fields. When the gravuser or gravfull author mode is enabled, attackers can set a malicious username, full...
CVE-2026-109318 Grav Git Sync 1.0.2 through 3.4.12 Command Injection via Commit Author
Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell substitutions into profile fields. When the gravuser or gravfull author mode is enabled, attackers can set a malicious username, full...
CVE-2026-109305
Craft CMS versions 5.10.2 through 5.10.13 contain a Twig sandbox bypass vulnerability. This flaw allows non-admin users with the System Messages permission to invoke arbitrary PHP callables (such as passthru or system) via the "has some" and "has every" operators in sandboxed templates. Successfu...
EUVD-2026-97607
Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables through the "has some" and "has every" operators. Users with the System Messages permission can supply two-argument callables such as passthru or system in sandboxed templates t...
CVE-2026-109305 Craft CMS 5.10.2 before 5.10.14 Twig Sandbox Bypass RCE via has some/has every
Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables through the "has some" and "has every" operators. Users with the System Messages permission can supply two-argument callables such as passthru or system in sandboxed templates t...
CVE-2026-103535
Thelia v2.6.1 contains path traversal and PHP code injection vulnerabilities in its translation editor that can be chained to achieve remote code execution. The itemname parameter, used to build the translation file's write path, does not sanitize directory traversal sequences such as ../. This...
CVE-2026-103522
In Thelia v2.6.0, the store banner upload feature performs insufficient filetype validation that relies exclusively on client‑supplied MIME types. An attacker with administrative access can upload a PHP file disguised as an image to bypass validation and achieve remote code execution on the...
CVE-2026-109398
The Gumlet php-image-resize library (versions before 3.0.1 ) is vulnerable to a Denial of Service (DoS) attack via decompression bombs . The root cause is located in the ImageResize constructor within lib/ImageResize.php, which passes images to GD imagecreatefrom* functions without enforcing pixe...
CVE-2026-109397
Thelia versions before 3.1.2 and 3.2.x before 3.2.1 are vulnerable to an unrestricted file upload flaw. The FileProcessorService validates raw filenames, but FileManager::sanitizeFileName() subsequently strips trailing spaces, allowing authenticated back-office users to bypass security checks and...
CVE-2026-109398 Gumlet php-image-resize before 3.0.1 Denial of Service via Decompression Bombs
Gumlet php-image-resize before 3.0.1 contains a denial of service vulnerability because the ImageResize constructor in lib/ImageResize.php passes images to GD imagecreatefrom functions without pixel limits. Remote attackers can upload small, highly compressed images that decode to large bitmaps,...
EUVD-2026-97495
Gumlet php-image-resize before 3.0.1 contains a denial of service vulnerability because the ImageResize constructor in lib/ImageResize.php passes images to GD imagecreatefrom functions without pixel limits. Remote attackers can upload small, highly compressed images that decode to large bitmaps,...
CVE-2026-109398 Gumlet php-image-resize before 3.0.1 Denial of Service via Decompression Bombs
Gumlet php-image-resize before 3.0.1 contains a denial of service vulnerability because the ImageResize constructor in lib/ImageResize.php passes images to GD imagecreatefrom functions without pixel limits. Remote attackers can upload small, highly compressed images that decode to large bitmaps,...
CVE-2026-107248 CVE-2026-107248
Thelia 3.0.0's back-office Email/Messages feature contains a server‑side template injection SSTI flaw that allows any authenticated user with the “Messages” permission to supply unsandboxed Twig templates, which are then compiled and executed as raw code. By modifying Message content, an attacker...
EUVD-2026-97485
Thelia 3.0.0's back-office Email/Messages feature contains a server‑side template injection SSTI flaw that allows any authenticated user with the “Messages” permission to supply unsandboxed Twig templates, which are then compiled and executed as raw code. By modifying Message content, an attacker...
CVE-2026-107248
Thelia 3.0.0's back-office Email/Messages feature is vulnerable to a server-side template injection (SSTI) flaw. This issue allows any authenticated user with the “Messages” permission to supply unsandboxed Twig templates , which the system compiles and executes as raw code. An attacker can explo...