Lucene search
+L

966 matches found

Cvelist
Cvelist
•added 2026/09/30 5:22 p.m.•3 views

CVE-2026-103474 yii2-starter-kit through 4.2.0 Unrestricted File Upload RCE

yii2-starter-kit through 4.2.0 fails to validate file types in the backend storage upload actions, allowing authenticated managers to upload PHP files. Attackers with manager role can upload PHP scripts to the web-accessible storage directory and request them to execute arbitrary code on the serv...

8.8CVSS
SaveExploits0References4
Nuclei
Nuclei
•added 2026/09/30 2:12 a.m.•21 views

Dolibarr <=22.0.4 - Local File Inclusion

Dolibarr = 22.0.4 contains a local file inclusion caused by manipulation of the objectdesc parameter and a fail-open logic flaw in restrictedArea in /core/ajax/selectobject.php, letting authenticated users with no specific privileges read arbitrary non-PHP files. id: CVE-2026-34036 info: name:...

6.5CVSS5.9AI score0.01468EPSS
SaveExploits3References3
EUVD
EUVD
•added 2026/09/30 12:32 a.m.•6 views

EUVD-2026-89469

The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and execute arbitrary PHP files on the web server...

9.4CVSS6.2AI score0.00395EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/29 10:38 p.m.•16 views

PhoneMonitor

PhoneMonitor A Remote Administration Tool for Android devices. The Minimum SDK version for the app is API 15 and by its nature, the Target API level makes sense to be 21. Instructions: Open the folder PhoneMonitor with Android Studio. Replace the XXXX strings with the relevant substitutes from...

6.1AI score
SaveExploits0
CVE
CVE
•added 2026/09/29 9:26 p.m.•16 views

CVE-2026-70356

The Toptech TMS7 and TopHAT systems are vulnerable to an unrestricted file upload flaw in the TMS file upload endpoint . Due to a lack of server-side file type restrictions , an attacker with high privileges can upload and execute arbitrary PHP files on the web server. This vulnerability has a CR...

9.4CVSS6.4AI score0.00395EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/29 8:15 p.m.•12 views

CVE-2023-42326

pfSense 2.7.0 Command Injection Exploit CVE-2023-42326 This Python script is a Proof-of-Concept PoC exploit for the command injection vulnerability CVE-2023-42326 in pfSense 2.7.0. The vulnerability allows authenticated attackers to inject and execute arbitrary commands via the...

8.8CVSS8.4AI score0.64021EPSS
SaveExploits2
NVD
NVD
•added 2026/09/28 6:17 p.m.•10 views

CVE-2026-54675

FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, a critical vulnerability exists in the sound language upload and conversion functionality that allows an authenticated attacker to perform arbitrary file writes, leading directly to remote code execution RCE. Authentication...

8.7CVSS0.00598EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/27 4:00 p.m.•11 views

CVE-2024-4577

CVE-2024-4577 Environment Setup Files and PHP Files --poc-- Invoke-WebRequest -Method POST -Headers @"Content-Type" = "application/x-www-form-urlencoded" -Body "" -Uri "http://localhost/test.php?%ADd+allowurlinclude%3D1+%ADd+autoprepend file%3Dphp://input"...

9.8CVSS7.3AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
•added 2026/09/26 5:22 p.m.•14 views

CVE-2022-48197

CVE-2022-48197 Since Yahoo is no longer updating the project per this announcement: https://yahooeng.tumblr.com/post/96098168666/important-announcement-regarding-yui, I've decided to disclose the vulnerabilities here: The application has a lot of reflected XSS vulnerabilities in pretty much most...

6.1CVSS6.4AI score0.06608EPSS
SaveExploits3
EUVD
EUVD
•added 2026/09/26 6:39 a.m.•10 views

EUVD-2026-87542

The Request a Quote for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.9.2 via the afrfqsubmitquoteviapopup function. This is due to missing file extension and MIME type validation in the popup upload handler, which uses the raw...

9.8CVSS5.7AI score0.00413EPSS
SaveExploits3References2
CVE
CVE
•added 2026/09/25 7:38 p.m.•12 views

CVE-2026-100372

ClipBucket v5 versions prior to 5.5.3-#197 are vulnerable to a path traversal vulnerability within the admin template editor. Authenticated users with manage_template_access permissions can exploit the folder parameter by providing directory traversal sequences to move outside the layout director...

8.6CVSS6.3AI score0.01142EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/24 6:00 a.m.•10 views

EUVD-2026-85801

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not validate one of its display-style settings before using it to build a template path, allowing users with the Contributor role and above to include and execute arbitrary local PHP files on the server. An equivalent path w...

7.2CVSS6.1AI score0.00359EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/24 6:00 a.m.•24 views

CVE-2026-88843

The MasterStudy LMS WordPress Plugin (versions before 3.7.50 ) contains a vulnerability where a display-style setting is not properly validated when building a template path. This flaw allows users with the Contributor role or higher to perform local file inclusion and execute arbitrary local PHP...

7.2CVSS6.1AI score0.00359EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/04 12:00 a.m.•25 views

CVE-2026-71626

A vulnerability in Invoice Ninja v5.13.24 allows a remote attacker to obtain sensitive information . The issue is located within the StoreWebhookRequest.php , UpdateWebhookRequest.php , and WebhookSingle.php components. While the technical root cause is not explicitly detailed in the provided doc...

7.5CVSS5.3AI score0.00535EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/02 2:37 p.m.•33 views

EUVD-2026-68800

elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload RCE...

8.1CVSS5.9AI score0.00904EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/13 12:00 a.m.•1 views

CVE-2026-73532: Embedded Malicious Code

Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file libs/class-license-sync.php, loaded via a requireonce directive added to fluentformpro.php,...

9.8CVSS5.8AI score0.00671EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/09 6:00 a.m.•21 views

EUVD-2026-54879

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not properly validate a user-controlled path before using it in a file inclusion, allowing unauthenticated attackers to include...

5.7AI score0.00337EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/07 6:00 a.m.•17 views

CVE-2026-16263

The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not properly validate a user-controlled path before using it in a file inclusion, allowing users with a Subscriber account to include and execute arbitrary existing local PHP files on...

5.6AI score0.00535EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/07 12:00 a.m.•0 views

CVE-2026-16263: Improper Limitation of a Pathname to a Restricted Directory

The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not properly validate a user-controlled path before using it in a file inclusion, allowing users with a Subscriber account to include and execute arbitrary existing local PHP files on...

8.8CVSS6.2AI score0.00535EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/04 12:00 a.m.•29 views

PT-2026-67666

The Improve SEO WordPress plugin through 2.0.11 does not properly validate uploaded files, checking only the file content type while writing the file with the attacker-supplied extension into a publicly accessible directory, allowing unauthenticated users to upload executable PHP files and achiev...

5.9AI score0.00831EPSS
SaveExploits0References2
Rows per page
Query Builder