CVE-2019-11447-POC

sadnews CuteNews 2.1.2 - CVE-2019-11447 Proof-Of-Concept POC by CRFSlick, discovered by AkkuS An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload process in the profile area via the avatarfile field to index.php?mod=main&opt=personal...

Vikunja: Unbounded image decode on avatar and project-background uploads enables decode/resize amplification

Summary The 50-megapixel decode guard exists only on the task-attachment preview path. Avatar and project-background uploads decode uploaded images with no pixel cap. Worse, the avatar resize fixes the output height at 1024 and derives the width from the aspect ratio, so a tiny extreme-aspect-rat...

GHSA-4VH2-39RQ-RQ8J Vikunja: Unbounded image decode on avatar and project-background uploads enables decode/resize amplification

Summary The 50-megapixel decode guard exists only on the task-attachment preview path. Avatar and project-background uploads decode uploaded images with no pixel cap. Worse, the avatar resize fixes the output height at 1024 and derives the width from the aspect ratio, so a tiny extreme-aspect-rat...

CVE-2026-65650

CVE-2026-65650 — إثبات المفهوم: DoS مصادق عليه في رفع الصورة الرمزية في Elgg رفض خدمة مصادق عليه في ميزة رفع الصورة الرمزية في Elgg عبر أبعاد صورة غير محدودة، مما يتسبب في استنفاد ذاكرة GD. المتأثر: Elgg saveIconFromUploadedFile'avatar' return elggerrorresponseelggecho'avatar:resize:fail'; مكتبة ...

CVE-2025-25599

CVE-2025-25599 Details Bolt is an open-source content management system built using the Symfony PHP framework. During a short security assessment, Certitude identified several vulnerabilities including an arbitrary file read. Users with the role EDITOR , CHIEFEDITOR , ADMIN , or DEVELOPER may abu...

CVE-2021-46067

CVE-2021-46067 عنوان الاستغلال: نظام إدارة خدمات المركبات - 'متعدد' سرقة الكوكيز تؤدي إلى الاستيلاء الكامل على الحساب مؤلف الاستغلال: SANU P.L CVE: CVE-2021-46067 CVSS: 9.8 حرج المراجع: https://www.plsanu.com/vehicle-service-management-system-multiple-cookie-stealing-leads-to-full-account-takeove...

CVE-2019-11447_CuteNews-AvatarUploadRCE

CVE-2019-11447 استغلال/إثبات المفهوم - CuteNews 2.1.2 رفع الصورة الرمزية RCE مُصادق كود الاستغلال لـ CVE-2019-11447 والمعروف باسم CuteNews 2.1.2 رفع الصورة الرمزية RCE مُصادق روابط الاستغلال: النتيجة المتوقعة: تسجيل الدخول/إنشاء حساب، صياغة ملف PHP يختاره المستخدم مع بايتات سحرية بصيغة .gif، رفع...

cve-2019-11447

CVE-2019-11447 CutePHP Cute News 2.1.2 RCE PoC Цель : 2.1.2 Этот PoC-скрипт основан на простой реализации оригинального эксплойта от BobbySox. Оригинальный эксплойт — это MSF-модуль от Akuss. Этот скрипт требует IP-адрес или домен цели вместе с учетными данными, после чего он автоматически выполн...

CVE-2023-43838

CVE-2023-43838 ثغرة رفع ملفات تعسفية في نظام الإدارة الشخصية v1.4.64 تسمح للمهاجمين بتنفيذ تعليمات برمجية عشوائية عن طريق رفع ملف SVG مفبرك إلى صورة الرمز الشخصي للمستخدم. معلومات إضافية 1. قم بإنشاء ملف alert.svg بالمحتوى التالي: alert"huntr.dev"; 2. استضف ملف .SVG على خادم ويب. 3. ارفع ملف .SVG...

CVE-2021-42669

CVE-2021-42669 CVE-2021-42669 - Remote code execution via unrestricted file upload vulnerability in the Engineers online portal system. Technical description: A unrestricted file upload vulnerability exists in the Engineers Online Portal system. An attacker can leverage this vulnerability in orde...

CVE-2025-61183

CVE-2025-61183 XSS مخزّن في رفع الصورة الرمزية للمستخدم عبر معالجة SVG غير آمنة نظرة عامة تم تحديد ثغرة من نوع البرمجة النصية عبر المواقع المخزّنة Stored XSS في vaahcms، وتحديدًا داخل التفاعل بين منطق رفع الملفات في MediaController.php وطريقة storeAvatar في UserBase.php، مما يسمح لمستخدم مسجّل...

EUVD-2026-85728

A security vulnerability has been detected in weiqingwen spring-boot-forum up to 538eecc3c6b85fdf0768ab4e8354b48c0c17d94f. Affected is the function validate of the file src/main/java/com/qingwenwei/util/NewUserFormValidator.java of the component Avatar Upload. The manipulation of the argument...

CVE-2026-96678

A security vulnerability has been detected in weiqingwen spring-boot-forum up to 538eecc3c6b85fdf0768ab4e8354b48c0c17d94f. Affected is the function validate of the file src/main/java/com/qingwenwei/util/NewUserFormValidator.java of the component Avatar Upload. The manipulation of the argument...

CVE-2026-96678 weiqingwen spring-boot-forum Avatar Upload NewUserFormValidator.java validate path traversal

A security vulnerability has been detected in weiqingwen spring-boot-forum up to 538eecc3c6b85fdf0768ab4e8354b48c0c17d94f. Affected is the function validate of the file src/main/java/com/qingwenwei/util/NewUserFormValidator.java of the component Avatar Upload. The manipulation of the argument...

CVE-2026-96678 weiqingwen spring-boot-forum Avatar Upload NewUserFormValidator.java validate path traversal

A security vulnerability has been detected in weiqingwen spring-boot-forum up to 538eecc3c6b85fdf0768ab4e8354b48c0c17d94f. Affected is the function validate of the file src/main/java/com/qingwenwei/util/NewUserFormValidator.java of the component Avatar Upload. The manipulation of the argument...

CVE-2026-96678

A path traversal vulnerability exists in the Avatar Upload component of weiqingwen spring-boot-forum (affected up to commit 538eecc3c6b85fdf0768ab4e8354b48c0c17d94f). The flaw is located in the validate function within the file src/main/java/com/qingwenwei/util/NewUserFormValidator.java, where ma...

CVE-2026-96678: Improper Limitation of a Pathname to a Restricted Directory

A security vulnerability has been detected in weiqingwen spring-boot-forum up to 538eecc3c6b85fdf0768ab4e8354b48c0c17d94f. Affected is the function validate of the file src/main/java/com/qingwenwei/util/NewUserFormValidator.java of the component Avatar Upload. The manipulation of the argument...

PT-2026-97613

Name of the Vulnerable Software and Affected Versions weiqingwen spring-boot-forum versions up to 538eecc3c6b85fdf0768ab4e8354b48c0c17d94f Description A path traversal issue exists in the Avatar Upload component. A remote attacker can exploit this by manipulating the Username argument within the...

CVE-2026-91971

Vikunja before 2.6.0 fails to apply pixel decode limits to avatar and project-background upload endpoints, allowing authenticated users to upload crafted images that decode to excessive pixel counts. Attackers can upload small images with extreme aspect ratios that consume significant CPU and...

CVE-2026-91849

A security flaw has been discovered in WuzhiCMS up to 4.1.0. This affects the function member::setAvatar of the file /index.php?m=member&f=user&v=setAvatar of the component Avatar Upload. The manipulation of the argument File results in unrestricted upload. The attack can be executed remotely. Th...