9068 matches found
chyrp-lite-rce-poc
chyrp-lite-rce-poc CVE-2026-53767 + CVE-2026-53768 - Chyrp Lite ≤ 2026.01（"Iriomote"）における認証済みRCE 連鎖攻撃: uploadspath ブロックリストバイパス（CVE-2026-53768）+ adminupdateupload におけるファイル拡張子検証の欠如（CVE-2026-53767）→ www-data としてのリモートコード実行 概要 Chyrp Lite ≤ 2026.01 は、changesettings および editupload...
CVE-2021-42671
CVE-2021-42671 CVE-2021-42671 - 기술자 온라인 포털 시스템의 손상된 접근 제어 취약점. 기술 설명: 손상된 접근 제어 취약점이 Engineers Online Portal에 존재합니다. 공격자는 이 취약점을 이용하여 접근 제어를 우회하고, 인증이나 권한 부여 없이 웹 서버에 업로드된 모든 파일에 접근할 수 있습니다. 취약한 도메인 - http://localhost/niamunozmonitoringsystem/admin/uploads/ 개념 증명 Poc -...
CVE-2026-76870: Out-of-bounds Read
Netcore NR255-V version 1.5.130703 contains an out-of-bounds read vulnerability in the mtdwrite pre-flash validation routine triggered by short firmware uploads. Attackers can upload a truncated firmware image via putfilecgi.c to trigger out-of-bounds reads across main.c, checkimageuuid.c, and...
Astra Linux – Vulnerability in Tomcat9
Path Equivalence: The use of ‘file.Name’ an internal dot notation can lead to Remote Code Execution, information disclosure, or the addition of malicious content to uploaded files via the write-enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat versions as follows: 11.0.0-...
Astra Linux – Vulnerability in Velocity
An attacker who is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/modify Velocity templates running Apache...
CVE-2026-88932
multer is a Node.js middleware for handling multipart/form-data uploads. In versions 2.2.0 through 2.3.0, when a request using disk storage is aborted mid-upload, file writes that complete after multer has already run its abort cleanup are not removed, so each aborted upload can leave an orphaned...
CVE-2026-88932
multer is a Node.js middleware for handling multipart/form-data uploads. In versions 2.2.0 through 2.3.0 , when a request using disk storage is aborted mid-upload, file writes that complete after multer has already run its abort cleanup are not removed, leaving orphaned files on disk. A remote un...
CVE-2026-88932 multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads
multer is a Node.js middleware for handling multipart/form-data uploads. In versions 2.2.0 through 2.3.0, when a request using disk storage is aborted mid-upload, file writes that complete after multer has already run its abort cleanup are not removed, so each aborted upload can leave an orphaned...
CVE-2026-88932 multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads
multer is a Node.js middleware for handling multipart/form-data uploads. In versions 2.2.0 through 2.3.0, when a request using disk storage is aborted mid-upload, file writes that complete after multer has already run its abort cleanup are not removed, so each aborted upload can leave an orphaned...
CVE-2026-88932 multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads
multer is a Node.js middleware for handling multipart/form-data uploads. In versions 2.2.0 through 2.3.0, when a request using disk storage is aborted mid-upload, file writes that complete after multer has already run its abort cleanup are not removed, so each aborted upload can leave an orphaned...
PT-2026-91122
multer is a Node.js middleware for handling multipart/form-data uploads. In versions 2.2.0 through 2.3.0, when a request using disk storage is aborted mid-upload, file writes that complete after multer has already run its abort cleanup are not removed, so each aborted upload can leave an orphaned...
GHSA-7GHQ-V6JF-G56C Traefik: respondingTimeouts.readTimeout is not applied to HTTP/3, leaving slow-body uploads unbounded
Summary There is a medium severity vulnerability in Traefik's HTTP/3 entry points: the respondingTimeouts settings were not applied to the HTTP/3 request path. readTimeout in particular is on by default at 60s and is documented as bounding the time to read the entire request including its body, b...
multer vulnerable to Denial of Service via file descriptor leak on aborted uploads
Impact A vulnerability in multer 2.2.0 allows an attacker to trigger a Denial of Service DoS by aborting or truncating multipart uploads. When using diskStorage, the destination write stream is not closed if the upload is aborted before it finishes, so each failed request leaks an open file...
GHSA-QFVM-CV95-JQJF multer vulnerable to Denial of Service via file descriptor leak on aborted uploads
Impact A vulnerability in multer 2.2.0 allows an attacker to trigger a Denial of Service DoS by aborting or truncating multipart uploads. When using diskStorage, the destination write stream is not closed if the upload is aborted before it finishes, so each failed request leaks an open file...
NPM: multer vulnerable to Denial of Service via file descriptor leak on aborted uploads
NPM: multer vulnerable to Denial of Service via file descriptor leak on aborted uploads vulnerability discovered by ? in WordPress Npm multer versions 2.2.0...
CVE-2026-86436 Lara Dashboard before 1.3.2 Missing Authorization in Post-Builder Media Upload Endpoints
Lara Dashboard before 1.3.2 fails to authorize access to the post-builder image and video upload endpoints, allowing authenticated accounts without content permissions to upload files. Attackers can upload polyglot files with attacker-chosen extensions to the public web root and execute code if t...
EUVD-2026-72507
In JetBrains YouTrack before 2026.2.18634 stored XSS was possible via project and organization icon uploads...
CVE-2026-86491
JetBrains YouTrack versions prior to 2026.2.18634 were affected by a stored XSS vulnerability exploitable through project and organization icon uploads . An attacker with high privileges (e.g., an authenticated user with project or organization admin rights) could inject malicious scripts that ex...