350 matches found
CVE-2026-65650
CVE-2026-65650 — PoC: DoS autenticato nel caricamento avatar di Elgg Denial of service autenticato nella funzionalità di caricamento avatar di Elgg tramite dimensioni immagine illimitate, che causano l'esaurimento della memoria di GD. Interessati: Elgg saveIconFromUploadedFile'avatar' return...
CVE-2019-11447_CuteNews-AvatarUploadRCE
CVE-2019-11447 Exploit/PoC - CuteNews 2.1.2 Avatar upload RCE Autenticato Codice exploit per CVE-2019-11447 noto anche come CuteNews 2.1.2 Avatar upload RCE Autenticato Link dell'exploit: Risultato atteso: accedere/registrare un account, creare un file PHP scelto dall'utente con magic bytes .gif,...
cve-2019-11447
CVE-2019-11447 CutePHP Cute News 2.1.2 PoC di RCE Bersaglio: 2.1.2 Questo script PoC si basa su una semplice implementazione dell'exploit originale di BobbySox. L'exploit originale è un modulo MSF di Akuss. Questo script richiede l'indirizzo IP o il dominio del target insieme alle credenziali;...
CVE-2025-61183
CVE-2025-61183 Gespeichertes XSS beim Hochladen von Benutzer-Avataren durch unsichere SVG-Verarbeitung Übersicht Eine Schwachstelle in Bezug auf gespeichertes Cross-Site Scripting XSS wurde im vaahcms identifiziert, insbesondere in der Interaktion zwischen der Datei-Upload-Logik in...
CVE-2021-46067
CVE-2021-46067 Titolo Exploit: Vehicle Service Management System - Il 'multiplo' furto di cookie porta alla completa presa di controllo dell'account Full Account Takeover Autore dell'Exploit: SANU P.L CVE: CVE-2021-46067 CVSS: 9.8 CRITICO Riferimenti:...
CVE-2023-43838
CVE-2023-43838 पर्सनल मैनेजमेंट सिस्टम v1.4.64 में एक मनमाना फ़ाइल अपलोड भेद्यता, हमलावरों को उपयोगकर्ता प्रोफ़ाइल के अवतार में एक तैयार SVG फ़ाइल अपलोड करके मनमाना कोड निष्पादित करने की अनुमति देती है। अतिरिक्त जानकारी 1. निम्नलिखित सामग्री के सा�ए alert.svg बनाएं: root@kitploit: alert"huntr.dev...
CVE-2019-11447-POC
sadnews CuteNews 2.1.2 - CVE-2019-11447 Proof-Of-Concept CRFSlick द्वारा POC, AkkuS द्वारा खोजा गया CutePHP CuteNews 2.1.2 में एक समस्या पाई गई। एक हमलावर प्रोफ़ाइल क्षेत्र में अवतार अपलोड प्रक्रिया के माध्यम से, avatarfile फ़ील्ड के ज़रिए index.php?mod=main&opt=personal पर सर्वर में घुसपैठ कर सक...
CVE-2021-42669
CVE-2021-42669 CVE-2021-42669 - Esecuzione di codice in remoto tramite vulnerabilità di upload di file senza restrizioni nel sistema del portale online degli ingegneri. Descrizione tecnica: Esiste una vulnerabilità di upload di file senza restrizioni nel sistema del portale online degli ingegneri...
CVE-2025-25599
CVE-2025-25599 विवरण Bolt एक ओपन-सोर्स सामग्री प्रबंधन प्रणाली है जो Symfony PHP फ्रेमवर्क का उपयोग करके बनाई गई है। एक छोटे सुरक्षा मूल्यांकन के दौरान, Certitude ने कई कमजोरियों की पहचान की, जिसमें मनमाना फ़ाइल पढ़ना शामिल है। जिन उपयोगकर्ताओं के पास EDITOR , CHIEFEDITOR , ADMIN , या DEVELOPER...
CVE-2026-72594
A stored cross-site scripting XSS vulnerability in lobehub/lobe-chat through v2.2.13 allows a low-privileged authenticated user to inject arbitrary JavaScript into the application by uploading a crafted SVG file as a user avatar...
EUVD-2026-55164
A stored cross-site scripting XSS vulnerability in lobehub/lobe-chat through v2.2.13 allows a low-privileged authenticated user to inject arbitrary JavaScript into the application by uploading a crafted SVG file as a user avatar...
CVE-2026-72594 lobehub lobe-chat - Stored Cross-Site Scripting via Unrestricted SVG Avatar Upload
A stored cross-site scripting XSS vulnerability in lobehub/lobe-chat through v2.2.13 allows a low-privileged authenticated user to inject arbitrary JavaScript into the application by uploading a crafted SVG file as a user avatar...
CVE-2026-72594
A stored cross-site scripting XSS vulnerability in lobehub/lobe-chat through v2.2.13 allows a low-privileged authenticated user to inject arbitrary JavaScript into the application by uploading a crafted SVG file as a user avatar...
CVE-2026-72594
CVE-2026-72594 affects lobehub/lobe-chat up to v2.2.13. The vulnerability is a stored XSS where a low-privileged authenticated user can inject arbitrary JavaScript by uploading a crafted SVG as a user avatar. The avatar upload handler derives the stored file extension and S3 content type from the...
GHSA-G9J2-8W95-3VWV Cloudreve: Denial of Service - Image decompression / pixel bomb in thumbnail & avatar decoding crashes the server
Summary Cloudreve's built-in image processor decodes user-supplied images with Go's standard-library decoders image/png, image/jpeg, image/gif and guards only the compressed file size — never the decoded pixel dimensions. Go's decoders allocate a pixel buffer sized bytesPerPixel × width × height...
Cloudreve: Denial of Service - Image decompression / pixel bomb in thumbnail & avatar decoding crashes the server
Summary Cloudreve's built-in image processor decodes user-supplied images with Go's standard-library decoders image/png, image/jpeg, image/gif and guards only the compressed file size — never the decoded pixel dimensions. Go's decoders allocate a pixel buffer sized bytesPerPixel × width × height...
PT-2026-64433
Name of the Vulnerable Software and Affected Versions Cloudreve versions prior to 4.17.0 Description Cloudreve contains an issue where the built-in image decoders for PNG, JPEG, and GIF formats limit only the compressed file size but do not restrict the decoded pixel dimensions. An authenticated...
Allocation of Resources Without Limits or Throttling
Overview elgg/elgg is a development framework used for creating socially aware web applications. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the avatar upload process. An attacker can cause resource exhaustion by uploading an image...