86348 matches found
CVE-2026-12106: Server-Side Request Forgery (SSRF)
The Auto Upload Images plugin for WordPress is vulnerable to Limited Server-Side Request Forgery in all versions up to, and including, 3.3.2 via the downloadImage function. This makes it possible for authenticated attackers, with contributor-level access and above, to make web requests to arbitra...
CVE-2026-84738: Improper Control of Generation of Code
The AF Companion WordPress plugin before 2.2.0 does not validate the type of files uploaded through one of its import features, allowing users with a low-privileged store-management role to upload arbitrary files, including PHP ones, leading to Remote Code Execution...
PT-2026-95397
Name of the Vulnerable Software and Affected Versions SveltyCMS version 0.0.6 Description A remote cross site scripting issue exists within the SVG Media Upload component, specifically affecting the src/utils/media/media-service.server.ts file. Cross site scripting is a technique where malicious...
CVE-2026-93506: Server-Side Request Forgery (SSRF)
A vulnerability was determined in SveltyCMS 0.0.6. This issue affects some unknown processing of the file /mediagallery/upload-media of the component File Upload Endpoint. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. This patch is called...
CVE-2026-93505: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SveltyCMS 0.0.6. This vulnerability affects unknown code of the file src/utils/media/media-service.server.ts of the component SVG Media Upload. Performing a manipulation results in cross site scripting. The attack can be initiated remotely. The patch is named...
PT-2026-95418
Name of the Vulnerable Software and Affected Versions SveltyCMS version 0.0.6 Description An issue in the File Upload Endpoint component allows for remote server-side request forgery SSRF, which occurs when a server is tricked into making requests to an unintended location. This is caused by...
PT-2026-95328
Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management affected versions not specified Description Improper file validation controls lead to an unrestricted file upload issue. This allows an unauthenticated attacker to upload and execute malicious payloads, which can...
CVE-2026-56590: Unrestricted Upload of File with Dangerous Type
HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise...
PT-2026-95332
Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager versions prior to 7.2.1-69057-12 Synology DiskStation Manager versions prior to 7.2.2-72806-9 Synology DiskStation Manager versions prior to 7.3.2-86009-4 Synology DiskStation Manager versions prior to 7.4-90075...
PT-2026-95412
Name of the Vulnerable Software and Affected Versions ClipBucket versions prior to 5.5.3-182 Description Authenticated users can achieve remote code execution by uploading a PHP file containing valid image magic bytes through the photo upload endpoint. The FileUpload::manageFile function in...
PT-2026-95696
The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box plugins for WordPress are vulnerable to Arbitrary File Upload in all versions from 2.0 up to, and including, 3.8.3 via the download file to uploads function. This is due to the import action being registered for...
Exploit for CVE-2026-87796
abraxaslabs.tech · github.com/abraxas ·&...
CVE-2026-53554
SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, the POST /api/v1/datasource/parseExcel endpoint in backend/apps/datasource/api/datasource.py uses attacker-controlled multipart filename data when selecting where uploaded content is stored, writes...
CVE-2026-53555
SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated uploader can submit an image/svg+xml assistant UI logo through PATCH /api/v1/system/assistant/ui, and SQLBot stores the SVG without sanitizing or validating embedded active content...
CVE-2026-53555 Stored XSS via SVG Upload
SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated uploader can submit an image/svg+xml assistant UI logo through PATCH /api/v1/system/assistant/ui, and SQLBot stores the SVG without sanitizing or validating embedded active content...
CVE-2026-53555 Stored XSS via SVG Upload
SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated uploader can submit an image/svg+xml assistant UI logo through PATCH /api/v1/system/assistant/ui, and SQLBot stores the SVG without sanitizing or validating embedded active content...
CVE-2026-53555
SQLBot , an intelligent Text-to-SQL system based on large language models and RAG, is vulnerable to a stored cross-site scripting (XSS) flaw prior to version 1.9.0 . An authenticated user can upload an image/svg+xml file as the assistant UI logo via PATCH /api/v1/system/assistant/ui. SQLBot store...
CVE-2026-53555 Stored XSS via SVG Upload
SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated uploader can submit an image/svg+xml assistant UI logo through PATCH /api/v1/system/assistant/ui, and SQLBot stores the SVG without sanitizing or validating embedded active content...
GHSA-R94F-HX44-8JQF Grav CMS vulnerable to remote code execution via .zip file upload
Summary A logged-in user can run any command on the server. A settings field can fill itself by calling one of Grav's built-in routines, and a safety check is supposed to allow only harmless ones. The check only recognises a routine when its name is written as one piece of text; named as a pair o...
