Known Vulnerabilities for Php Download Script by Threesquared.net
Listed below are 1 of the newest known vulnerabilities associated with "Php Download Script" by "Threesquared.net".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-110102 json | Powerlevel10k through 1.20.0 contains an insecure download vulnerability in the gitstatus/install script that disables TLS ce... | Not Provided | 2026-10-13 | 2026-10-14 |
| CVE-2026-92128 json | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier downloads a JAR file specified by URL twice, confirming the ... | Not Provided | 2026-09-16 | 2026-09-16 |
| CVE-2026-87675 json | An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9... | Not Provided | 2026-10-08 | 2026-10-09 |
| CVE-2026-82387 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a user wit... | Not Provided | 2026-09-28 | 2026-09-29 |
| CVE-2026-81814 json | Affected versions of Flowintel render calendar event titles using innerHTML. Because those titles are derived from case title... | Not Provided | 2026-08-27 | 2026-08-27 |
| CVE-2026-75529 json | Pandora is affected by a stored cross-site scripting vulnerability in the PDF download functionality. The /task-download/| Not Provided
|
2026-08-17
|
2026-08-18
|
|
| CVE-2026-70558 json | Dinky's POST /download/uploadFromRsByLocal handler passes the caller-supplied path parameter directly to new File(path) and f... | Not Provided | 2026-08-06 | 2026-08-14 |
| CVE-2026-58474 json | whichllm before 0.5.16 contains a code injection vulnerability in the run and snippet commands that allows a remote attacker ... | Not Provided | 2026-08-26 | 2026-08-29 |
| CVE-2026-56672 json | ComfyUI is a node-based diffusion model GUI, API, and backend. Prior to 0.28.0, GET /userdata/{file} served user-controlled H... | Not Provided | 2026-07-31 | 2026-07-31 |
| CVE-2026-55696 json | PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Prior to 2.0.5, AttachmentViewer.setAtta... | Not Provided | 2026-08-28 | 2026-08-31 |