CVE-2020-23591

CVE-2020-23591 OPTILINK E-PON "رقم الطراز: OP-XT71000N" مع "إصدار العتاد: V2.2"؛ & "إصدار البرنامج الثابت: OPV3.3.1-191028" تم العثور على ثغرة في "OPTILINK OP-XT71000N إصدار العتاد: V2.2، إصدار البرنامج الثابت: OPV3.3.1-191028" تسمح للمهاجم برفع ملف تعسفي عبر " /mgmdevupgrade.asp " ويمكنها "حذف ك...

CVE-2026-1405

CVE-2026-1405 Slider Future = 1.0.5 - رفع ملفات عشوائية بدون مصادقة 🚀 CVE-2026-1405.py — أداة استغلال جماعي لـ Slider Future 🩸 نظرة عامة على الثغرة المكوّن: Slider Future إضافة ووردبريس الإصدارات المتأثرة: ≤ 1.0.5 الثغرة: رفع ملفات عشوائية بدون مصادقة CVE: CVE-2026-1405 درجة CVSS: 9.8 حرجة إضافة...

CVE-2026-105695 Penpot: Missing authorization in chunked-upload assembly lets another authenticated user consume a victim's upload session

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, assemble-chunks retrieves an upload session using only its session ID, while upload-chunk correctly scopes the lookup to the authenticated profile. An authenticated user who obtains another user's live, completed...

CVE-2026-105695 Penpot: Missing authorization in chunked-upload assembly lets another authenticated user consume a victim's upload session

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, assemble-chunks retrieves an upload session using only its session ID, while upload-chunk correctly scopes the lookup to the authenticated profile. An authenticated user who obtains another user's live, completed...

CVE-2026-105695 Penpot: Missing authorization in chunked-upload assembly lets another authenticated user consume a victim's upload session

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, assemble-chunks retrieves an upload session using only its session ID, while upload-chunk correctly scopes the lookup to the authenticated profile. An authenticated user who obtains another user's live, completed...

EUVD-2026-92714

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, assemble-chunks retrieves an upload session using only its session ID, while upload-chunk correctly scopes the lookup to the authenticated profile. An authenticated user who obtains another user's live, completed...

CVE-2026-105695

The open-source design and prototyping platform Penpot contains a missing authorization vulnerability in its chunked-upload assembly functionality. Prior to version 2.18.0 , the assemble-chunks function retrieves an upload session using only its session ID, failing to scope the lookup to the auth...

CVE-2026-48908-Joomla-SP-Page-Builder-RCE

🛡️ تحليل CVE-2026-48908 رفع ملفات تعسفي بدون مصادقة إلى تنفيذ كود عن بُعد RCE في JoomShaper SP Page Builder -critical?style=for-the-badge&logo=alert -black?style=for-the-badge&logo=github تحليل تقني شامل لثغرة تنفيذ كود عن بُعد بدون مصادقة. 📌 الملخص التنفيذي CVE-2026-48908 هي ثغرة أمنية حرجة تم...

CVE-2023-44763_ConcreteCMS-Arbitrary-file-upload-Thumbnail

ثغرة XSS مخزنة في ConcreteCMS الإصدار 9.2.1 المؤلف: Sergio الوصف: يتأثر ConcreteCMS الإصدار 9.2.1 بثغرة رفع ملفات تعسفية تسمح بتنفيذ هجوم XSS مخزن. نواقل الهجوم: تسمح ثغرة في تنقية رفع ملفات "الصورة المصغرة" Thumbnail برفع ملف PDF / SVG / HTML يحتوي على كود XSS مخفي. البرهان على المفهوم POC: عند...

CVE-2026-105686 Penpot: Repeated chunk index causes temporary-storage amplification

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the chunked media upload RPC validates that a chunk index is in range but neither rejects an already stored index nor replaces its previous object. An authenticated user can repeatedly upload the same valid index, causing...

EUVD-2026-92779

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the chunked media upload RPC validates that a chunk index is in range but neither rejects an already stored index nor replaces its previous object. An authenticated user can repeatedly upload the same valid index, causing...

CVE-2026-105686

The open-source design and prototyping platform Penpot is vulnerable to temporary-storage amplification in versions prior to 2.18.0 . The issue exists within the chunked media upload RPC , which fails to reject or replace previously stored chunk indexes. An authenticated user can repeatedly uploa...

CVE-2026-105686 Penpot: Repeated chunk index causes temporary-storage amplification

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the chunked media upload RPC validates that a chunk index is in range but neither rejects an already stored index nor replaces its previous object. An authenticated user can repeatedly upload the same valid index, causing...

CVE-2026-105686 Penpot: Repeated chunk index causes temporary-storage amplification

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the chunked media upload RPC validates that a chunk index is in range but neither rejects an already stored index nor replaces its previous object. An authenticated user can repeatedly upload the same valid index, causing...

CVE-2022-3992

CVE-2022-3992 ثغرة برمجة نصية عبر المواقع XSS في WonderCMS الوصف: تسمح ثغرة أمنية من نوع البرمجة النصية عبر المواقع XSS في نظام إدارة التعقيم الإصدار 1.0 للمهاجمين المحتملين برفع ملفات عشوائية عبر اسم معدل في حقول شعار النظام ضمن حقول معلومات النظام. لا يحتوي ملف تعريف الارتباط على علامة HttpOnly...

Flink_RCE

Apache Flink Web Dashboard: وصول غير مصرح به، رفع jar خبيث يؤدي إلى تنفيذ أوامر برمجية عن بُعد msf nc استخدام python: python 02-Flink.py http://10.10.20.100:8081 nc.jar...

ninja-form-exploit

ninja-form-exploit CVE-2026-0740 — ماسح ضعف متعدد الخيوط لثغرة اجتياز المسار في رفع ملفات Ninja Forms على ووردبريس. الوصف يقوم main.py بفحص قائمة أهداف ووردبريس لتحديد ما إذا كان ملحق Ninja Forms File Uploads معرضًا لـ CVE-2026-0740. ملخص سير العمل: 1. تسوية عنوان URL http/https، إزالة الشرطة...

Java-Compressed-file-security

Java-Compressed-file-security java web ثغرات أمان الملفات المضغوطة بيئة الاختبار: Windows For Apache Tomcat/8.5.16 0x01 إنشاء ملف مضغوط خبيث لاجتياز الدليل Directory Traversal الكود: coding=utf-8 import zipfile import sys if name == "main": try: with open"404.jsp", "r" as f: binary = f.read zipFi...

EUVD-2026-92774

A security vulnerability has been detected in feelec-yishu feelcrm-os 1.0.0. This issue affects some unknown processing of the file App/Feelcrm/Crm/Controller/UploadController.class.php of the component UploadTicketFile Endpoint. Such manipulation of the argument cmd leads to unrestricted upload...

CVE-2026-105389 feelec-yishu feelcrm-os UploadTicketFile Endpoint UploadController.class.php unrestricted upload

A security vulnerability has been detected in feelec-yishu feelcrm-os 1.0.0. This issue affects some unknown processing of the file App/Feelcrm/Crm/Controller/UploadController.class.php of the component UploadTicketFile Endpoint. Such manipulation of the argument cmd leads to unrestricted upload...