CVE-2026-101142: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been found in Eleveo Quality Management 9.7.0. Affected by this vulnerability is an unknown functionality of the file Scorecard.jsp of the component Questionnaire Audio Upload. The manipulation leads to path traversal. The attack may be initiated remotely. The exploit has been...

CVE-2026-54675: Improper Limitation of a Pathname to a Restricted Directory

FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, a critical vulnerability exists in the sound language upload and conversion functionality that allows an authenticated attacker to perform arbitrary file writes, leading directly to remote code execution RCE. Authentication...

PT-2026-99959

FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, a critical vulnerability exists in the sound language upload and conversion functionality that allows an authenticated attacker to perform arbitrary file writes, leading directly to remote code execution RCE. Authentication...

PT-2026-99882

A vulnerability was determined in Acrel Electric Unet Web Service up to 20260814. This vulnerability affects unknown code of the file /exchange/attachment/upload of the component Upload Endpoint. This manipulation of the argument File causes unrestricted upload. The attack can be initiated...

CVE-2026-101071: Unrestricted Upload of File with Dangerous Type

A vulnerability was determined in Acrel Electric Unet Web Service up to 20260814. This vulnerability affects unknown code of the file /exchange/attachment/upload of the component Upload Endpoint. This manipulation of the argument File causes unrestricted upload. The attack can be initiated...

CVE-2026-82387: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows a user with media-upload rights to store active content on Roller's origin, because the media upload feature trusts the upload-supplied content type and serves the stored file back wit...

VulnCheck KEV: CVE-2026-18143

The Request a Quote for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.9.2 via the afrfqsubmitquoteviapopup function. This is due to missing file extension and MIME type validation in the popup upload handler, which uses the raw...

CVE-2026-100880

A weakness has been identified in zhistaredu StarTraining up to 3.8.1. This vulnerability affects unknown code of the file du-common/src/main/java/com/edu/common/utils/file/MimeTypeUtils.java of the component Upload Endpoint. This manipulation of the argument File causes cross site scripting. It ...

EUVD-2026-88026

A weakness has been identified in zhistaredu StarTraining up to 3.8.1. This vulnerability affects unknown code of the file du-common/src/main/java/com/edu/common/utils/file/MimeTypeUtils.java of the component Upload Endpoint. This manipulation of the argument File causes cross site scripting. It ...

CVE-2026-100880

The zhistaredu StarTraining software (versions up to 3.8.1 ) is vulnerable to Cross-Site Scripting (XSS) within the Upload Endpoint component. The root cause lies in the manipulation of the File argument within the file du-common/src/main/java/com/edu/common/utils/file/MimeTypeUtils.java. This vu...

CVE-2026-100880 zhistaredu StarTraining Upload Endpoint MimeTypeUtils.java cross site scripting

A weakness has been identified in zhistaredu StarTraining up to 3.8.1. This vulnerability affects unknown code of the file du-common/src/main/java/com/edu/common/utils/file/MimeTypeUtils.java of the component Upload Endpoint. This manipulation of the argument File causes cross site scripting. It ...

CVE-2026-100880 zhistaredu StarTraining Upload Endpoint MimeTypeUtils.java cross site scripting

A weakness has been identified in zhistaredu StarTraining up to 3.8.1. This vulnerability affects unknown code of the file du-common/src/main/java/com/edu/common/utils/file/MimeTypeUtils.java of the component Upload Endpoint. This manipulation of the argument File causes cross site scripting. It ...

helpdeskz-file-upload-poc

HelpDeskZ File Upload RCE An unauthenticated arbitrary fil...

CVE-2026-100747

Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension 6.5.0 - Due to lack of an CSRF token check, a third-party site can upload files to an event and overwrite existing files with the same name...

CVE-2026-100747 Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0

Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension 6.5.0 - Due to lack of an CSRF token check, a third-party site can upload files to an event and overwrite existing files with the same name...

CVE-2026-100747

The Joomla Extension - svenbluege.de - Event Gallery extension (versions

EUVD-2026-87930

Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension 6.5.0 - Due to lack of an CSRF token check, a third-party site can upload files to an event and overwrite existing files with the same name...

CVE-2026-100747 Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0

Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension 6.5.0 - Due to lack of an CSRF token check, a third-party site can upload files to an event and overwrite existing files with the same name...

PT-2026-99531

Name of the Vulnerable Software and Affected Versions Event Gallery versions prior to 6.5.0 Description Cross-Site Request Forgery CSRF occurs during the image upload process due to the absence of a CSRF token check. This allows a third-party site to upload files to an event and overwrite existin...

CVE-2026-100747: Cross-Site Request Forgery (CSRF)

Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension 6.5.0 - Due to lack of an CSRF token check, a third-party site can upload files to an event and overwrite existing files with the same name...