cve-2019-11447

CVE-2019-11447 CutePHP Cute News 2.1.2 RCE PoC 대상: 2.1.2 이 PoC 스크립트는 BobbySox 가 작성한 원본 익스플로잇의 간단한 구현을 기반으로 합니다. 원본 익스플로잇은 Akuss 의 MSF 모듈입니다. 이 스크립트는 대상 IP 주소 또는 도메인과 함께 자격 증명이 필요하며, 자동으로 로그인하고, 페이로드를 업로드하고, 트리거하여 리버스 셸을 획득합니다. root@kitploit: python cve-2019-11447.py -t 10.10.10.206 -u twh -p...

CVE-2019-11447-POC

sadnews CuteNews 2.1.2 — CVE-2019-11447 Доказательство концепции POC от CRFSlick, обнаружен AkkuS Была обнаружена проблема в CutePHP CuteNews 2.1.2. Злоумышленник может проникнуть на сервер через процесс загрузки аватара в области профиля, используя поле avatarfile для...

CVE-2026-65650

CVE-2026-65650 — PoC: Elgg 아바타 업로드에서의 인증된 DoS 무제한 이미지 치수를 통한 Elgg 아바타 업로드 기능의 인증된 서비스 거부DoS 취약점으로, GD 메모리 고갈을 유발합니다. 영향받는 버전: Elgg saveIconFromUploadedFile'avatar' return elggerrorresponseelggecho'avatar:resize:fail';...

CVE-2025-61183

CVE-2025-61183 安全でないSVG処理を介したユーザーアバターアップロードにおける格納型XSS 概要 MediaController.php のファイルアップロードロジックと UserBase.php の storeAvatar メソッドの相互作用において、格納型クロスサイトスクリプティング（XSS）の脆弱性が確認されました。これにより、低権限の登録ユーザーがJavaScriptを埋め込んだ悪意のあるSVGファイルをアップロードできるようになります。この脆弱性は、コンテンツやMIMEタイプの検証が行われる前に...

CVE-2021-46067

CVE-2021-46067 익스플로잇 제목: Vehicle Service Management System - '다중Multiple' 쿠키 탈취로 인한 전체 계정 탈취 익스플로잇 작성자: SANU P.L CVE: CVE-2021-46067 CVSS: 9.8 치명적Critical 참고 자료: https://www.plsanu.com/vehicle-service-management-system-multiple-cookie-stealing-leads-to-full-account-takeover...

CVE-2025-25599

CVE-2025-25599 Подробности Bolt — это система управления контентом с открытым исходным кодом, построенная на Symfony PHP framework. В ходе краткой оценки безопасности компания Certitude выявила несколько уязвимостей, включая произвольное чтение файлов. Пользователи с ролями EDITOR , CHIEFEDITOR ,...

CVE-2021-42669

CVE-2021-42669 CVE-2021-42669 - Удаленное выполнение кода через уязвимость неограниченной загрузки файлов в системе онлайн-портала инженеров. Техническое описание: Уязвимость неограниченной загрузки файлов существует в системе онлайн-портала инженеров. Злоумышленник может использовать эту...

CVE-2026-72594

A stored cross-site scripting XSS vulnerability in lobehub/lobe-chat through v2.2.13 allows a low-privileged authenticated user to inject arbitrary JavaScript into the application by uploading a crafted SVG file as a user avatar...

EUVD-2026-55164

A stored cross-site scripting XSS vulnerability in lobehub/lobe-chat through v2.2.13 allows a low-privileged authenticated user to inject arbitrary JavaScript into the application by uploading a crafted SVG file as a user avatar...

CVE-2026-72594 lobehub lobe-chat - Stored Cross-Site Scripting via Unrestricted SVG Avatar Upload

A stored cross-site scripting XSS vulnerability in lobehub/lobe-chat through v2.2.13 allows a low-privileged authenticated user to inject arbitrary JavaScript into the application by uploading a crafted SVG file as a user avatar...

CVE-2026-72594

A stored cross-site scripting XSS vulnerability in lobehub/lobe-chat through v2.2.13 allows a low-privileged authenticated user to inject arbitrary JavaScript into the application by uploading a crafted SVG file as a user avatar...

CVE-2026-72594

CVE-2026-72594 affects lobehub/lobe-chat up to v2.2.13. The vulnerability is a stored XSS where a low-privileged authenticated user can inject arbitrary JavaScript by uploading a crafted SVG as a user avatar. The avatar upload handler derives the stored file extension and S3 content type from the...

GHSA-G9J2-8W95-3VWV Cloudreve: Denial of Service - Image decompression / pixel bomb in thumbnail & avatar decoding crashes the server

Summary Cloudreve's built-in image processor decodes user-supplied images with Go's standard-library decoders image/png, image/jpeg, image/gif and guards only the compressed file size — never the decoded pixel dimensions. Go's decoders allocate a pixel buffer sized bytesPerPixel × width × height...

Cloudreve: Denial of Service - Image decompression / pixel bomb in thumbnail & avatar decoding crashes the server

Summary Cloudreve's built-in image processor decodes user-supplied images with Go's standard-library decoders image/png, image/jpeg, image/gif and guards only the compressed file size — never the decoded pixel dimensions. Go's decoders allocate a pixel buffer sized bytesPerPixel × width × height...

PT-2026-64433

Name of the Vulnerable Software and Affected Versions Cloudreve versions prior to 4.17.0 Description Cloudreve contains an issue where the built-in image decoders for PNG, JPEG, and GIF formats limit only the compressed file size but do not restrict the decoded pixel dimensions. An authenticated...

Allocation of Resources Without Limits or Throttling

Overview elgg/elgg is a development framework used for creating socially aware web applications. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the avatar upload process. An attacker can cause resource exhaustion by uploading an image...

CVE-2026-65650

Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload...

CVE-2026-65650

Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload...

CVE-2026-65650

Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload...

CVE-2026-52891

Wekan is open source kanban built with Meteor. Prior to 9.07, Wekan avatar upload functionality embeds user-supplied filenames into paths later passed to childprocess.exec for MIME-type detection. Because models/avatars.js and models/fileValidation.js used a shell command with the avatar filename...