Known Vulnerabilities for Php Download Script by Threesquared.net
Listed below are 1 of the newest known vulnerabilities associated with "Php Download Script" by "Threesquared.net".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-75529 json | Pandora is affected by a stored cross-site scripting vulnerability in the PDF download functionality. The /task-download/| Not Provided
|
2026-08-17
|
2026-08-18
|
|
| CVE-2026-70558 json | Dinky's POST /download/uploadFromRsByLocal handler passes the caller-supplied path parameter directly to new File(path) and f... | Not Provided | 2026-08-06 | 2026-08-08 |
| CVE-2026-56672 json | ComfyUI is a node-based diffusion model GUI, API, and backend. Prior to 0.28.0, GET /userdata/{file} served user-controlled H... | Not Provided | 2026-07-31 | 2026-07-31 |
| CVE-2026-52876 json | Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the open-pa... | Not Provided | 2026-08-18 | 2026-08-19 |
| CVE-2026-52873 json | Streambert is a cross-platform Electron Desktop App to stream and download video content. From version 2.5.0 until version 2.... | Not Provided | 2026-08-18 | 2026-08-21 |
| CVE-2026-49864 json | wetty provides terminal access in browser over http/https. Prior to version 3.0.4, the wetty client decodes a base64 filename... | Not Provided | 2026-08-13 | 2026-08-18 |
| CVE-2026-45348 json | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the packages.js template at src... | Not Provided | 2026-05-28 | 2026-05-28 |
| CVE-2026-26032 json | The PackagerResolver of Apache Ivy is able to download online artifacts and to (re)package them in a format defined by a pack... | Not Provided | 2026-07-15 | 2026-07-15 |
| CVE-2026-13733 json | The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'no_data_msg' Shortcode Attribute ... | Not Provided | 2026-07-01 | 2026-07-01 |
| CVE-2026-6859 json | A flaw was found in InstructLab. The `linux_train.py` script hardcodes `trust_remote_code=True` when loading models from Hugg... | Not Provided | 2026-04-22 | 2026-07-15 |