194 matches found
WP SuperBackup <= 2.3.3 - Unauthenticated Arbitrary File Upload to RCE
The Super Backup & Clone - Migrate for WordPress plugin indeed-wp-superbackup is vulnerable to arbitrary file uploads due to missing file type validation and a missing capability check on the ibkrestoremigratecheck function in all versions up to and including 2.3.3. Unauthenticated attackers can...
Realtyna Organic IDX/WPL <= 5.2.0 - Unauthenticated Arbitrary File Upload
Realtyna Organic IDX plugin + WPL Real Estate plugin for WordPress = 5.2.0 contains an unrestricted file upload vulnerability caused by missing file type validation and static API credentials, letting unauthenticated attackers upload executable files and achieve remote code execution, exploit...
ShowDoc - Remote Code Execution
The open-source API documentation tool ShowDoc had a remote code execution vulnerability before version 2.8.7 This vulnerability allowed unauthenticated remote attackers to upload .php files because the image upload function was not authenticated and the file extension validation was improper. id...
RSFiles! for Joomla - Arbitrary File Upload
RSFiles! comrsfiles for Joomla 1.17.12 allows unauthenticated arbitrary file upload via the rsfiles.upload task. The write method performs no authentication, CSRF token, or file extension checks, allowing upload of executable PHP files to the web-accessible downloads/ directory. id: CVE-2026-5782...
Vanna - SQL injection
Vanna v0.3.4 is vulnerable to SQL injection in its DuckDB integration exposed to its Flask Web APIs. Attackers can inject malicious SQL training data and generate corresponding queries to write arbitrary files on the victim's file system, such as backdoor.php with contents . This can lead to...
Check-WP-CVE-2020-35489
Check-WP-CVE-2020-35489 CVE-2020-35489 Уязвимость CVE-2020-35489 обнаружена в плагине WordPress Contact Form 7 версии 5.3.1 и более старых. Эксплуатируя эту уязвимость, злоумышленники могут просто загружать файлы любого типа, обходя все ограничения, установленные в отношении разрешенных типов...
CVE-2020-13671-old
CVE-2020-13671 RCE через загрузку файла — ядро Drupal Программное обеспечение: Drupal Core 8.7.5 Затронуты: 7.x 7.78, 8.x 8.8.11, 8.9.x 8.9.9, 9.0.x 9.0.8 CVSS: 8.8 Высокий CWE: CWE-434 — Неограниченная загрузка файла опасного типа CISA KEV: Да — известная эксплуатируемая уязвимость Advisory:...
CVE-2025-66802
CVE-2025-66802 Sourcecodester Covid-19 Système de traçage des contacts 1.0 – Téléchargement de fichier sans restriction conduisant à une exécution de code à distance Description Sourcecodester Covid-19 Système de traçage des contacts version 1.0 contient une vulnérabilité classée comme...
CVE-2026-1357
CVE-2026-1357 — WPvivid Backup & Migration ≤ 0.9.123 Неаутентифицированная произвольная загрузка файлов → RCE PoC для CVE-2026-1357 CVSS 9.8 Critical, CWE-434: неаутентифицированная произвольная загрузка файлов в плагине WPvivid Backup & Migration для WordPress, которая приводит к удалённому...
CVE-2026-Pending-Django-Summernote-RCE
CVE-2026-XXXXX ожидает: django-summernote Произвольная загрузка файлов RCE Этот репозиторий содержит Proof of Concept PoC для условного удалённого выполнения кода RCE уязвимости, обнаруженной в django-summernote версии 0.8.20.0 и более ранних. Информация об уязвимости Продукт : django-summernote...
CVE-2024-49653
📜 Эксплойт для плагина WordPress Portfolleo CVE-2024-49653 🚨 Детали уязвимости Название: Плагин WordPress Portfolleo = 1.2 — уязвимость произвольной загрузки файлов Описание: Уязвимость неограниченной загрузки файлов с опасным типом в плагине Portfolleo от James Eggers позволяет загружать веб-шел...
CVE-2024-49668
🚨 CVE-2024-49668: WordPress Verbalize WP 플러그인 임의 파일 업로드 취약점 📋 개요 CVE-2024-49668 은 WordPress Verbalize WP 플러그인 버전 1.0 이하에서 발견된 심각한 취약점입니다. 이 취약점은 인증되지 않은 공격자가 웹 서버에 웹 셸을 포함한 임의의 파일을 업로드할 수 있게 합니다. 문제는 파일 업로드 시 충분한 입력 검증 및 파일 형식 제한이 부족하기 때문에 발생합니다. 세부 정보 게시일: 2024-10-23 업데이트일: 2024-10-23 제목:...
CVE-2026-32475
CVE-2026-32475 — Elementor Pro ≤ 4.2.1 Неаутентифицированная произвольная загрузка файлов → RCE PoC для CVE-2026-32475 CVSS 9.0 Critical, CWE-434: неаутентифицированная произвольная загрузка файлов в модуле Forms плагина Elementor Pro, приводящая к удалённому выполнению кода. Исправлено в Element...
CVE-2026-1657
CVE-2026-1657: Неаутентифицированная произвольная загрузка файлов в плагине EventPrime Отказ от ответственности: Этот репозиторий создан исключительно в образовательных целях и для этичного раскрытия информации. Уязвимость была ответственно сообщена поставщику и устранена. Не используйте эту...
Exploit for CVE-2026-1357
CVE-2026-1357 Unauthenticated Arbitrary File Upload → Remote...
CVE-2026-49827
WebErpMesv2 (Resource Management and Manufacturing Execution System) versions 1.19 and prior are affected. A vulnerability in the HR Expense scan_file upload allows self-registered users to upload arbitrary PHP files, enabling Remote Code Execution. The issue is exacerbated by open registration (...
CVE-2026-49827 WebErpMesv2 has Unauthenticated RCE via Unrestricted File Upload in HR Expense scan_file (CWE-434)
WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Versions 1.19 and prior allow any self-registered user to upload arbitrary PHP files through the HR Expense scanfile parameter, leading to Remote Code Execution. Combined with open registration no invite...
CVE-2026-49827 WebErpMesv2 has Unauthenticated RCE via Unrestricted File Upload in HR Expense scan_file (CWE-434)
WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Versions 1.19 and prior allow any self-registered user to upload arbitrary PHP files through the HR Expense scanfile parameter, leading to Remote Code Execution. Combined with open registration no invite...
CVE-2026-49827 WebErpMesv2 has Unauthenticated RCE via Unrestricted File Upload in HR Expense scan_file (CWE-434)
WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Versions 1.19 and prior allow any self-registered user to upload arbitrary PHP files through the HR Expense scanfile parameter, leading to Remote Code Execution. Combined with open registration no invite...
