Lucene search
+L

1480 matches found

Positive Technologies
Positive Technologies
added 2026/03/25 12:00 a.m.12 views

PT-2026-28050

Unrestricted Upload of File with Dangerous Type vulnerability in halfdata Green Downloads halfdata-paypal-green-downloads allows Using Malicious Files.This issue affects Green Downloads: from n/a through = 2.08...

5.8AI score0.00259EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/25 12:00 a.m.20 views

WordPress plugin WPBookit Pro 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

9.9CVSS5.9AI score0.00328EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/20 9:16 a.m.27 views

CVE-2026-33071

FileRise is a self-hosted web file manager / WebDAV server. In versions prior to 3.8.0, the WebDAV upload endpoint accepts any file extension including .phtml, .php5, .htaccess, and other server-side executable types, bypassing the filename validation enforced by the regular upload path. In...

8.8CVSS0.00621EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/03/19 3:31 p.m.10 views

EUVD-2026-13107

Unrestricted Upload of File with Dangerous Type vulnerability in ThemeGoods Photography allows Path Traversal.This issue affects Photography: from n/a through 7.7.5...

7.2CVSS5.8AI score0.00358EPSS
SaveExploits0References2
CVE
CVE
added 2026/03/19 2:49 p.m.33 views

CVE-2026-27043

CVE-2026-27043 affects the WordPress Photography theme (ThemeGoods Photography). The vulnerability is described as an authenticated (Editor+) Arbitrary File Upload vulnerability that arises in Photography versions up to 7.7.5, with public notes indicating exposure risk and path traversal implicat...

7.2CVSS5.2AI score0.00358EPSS
SaveExploits0References1
attackerkb
attackerkb
added 2026/03/19 2:49 p.m.4 views

CVE-2026-27043

Unrestricted Upload of File with Dangerous Type vulnerability in ThemeGoods Photography allows Path Traversal.This issue affects Photography: from n/a before 7.7.6...

7.2CVSS5.9AI score0.00358EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/03/19 9:30 a.m.17 views

EUVD-2026-13087

Unrestricted Upload of File with Dangerous Type vulnerability in Syarif Mobile App Editor allows Upload a Web Shell to a Web Server.This issue affects Mobile App Editor: from n/a through 1.3.1...

9.1CVSS5.8AI score0.00275EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/19 9:16 a.m.17 views

CVE-2026-27067

Unrestricted Upload of File with Dangerous Type vulnerability in Syarif Mobile App Editor mobile-app-editor allows Upload a Web Shell to a Web Server.This issue affects Mobile App Editor: from n/a through = 1.3.1...

9.1CVSS0.00275EPSS
SaveExploits0References1
attackerkb
attackerkb
added 2026/03/19 8:41 a.m.5 views

CVE-2026-27067

Unrestricted Upload of File with Dangerous Type vulnerability in Syarif Mobile App Editor allows Upload a Web Shell to a Web Server.This issue affects Mobile App Editor: from n/a through 1.3.1...

9.1CVSS5.8AI score0.00275EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/03/19 8:41 a.m.6 views

CVE-2026-27067 WordPress Mobile App Editor plugin <= 1.3.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Syarif Mobile App Editor allows Upload a Web Shell to a Web Server.This issue affects Mobile App Editor: from n/a through 1.3.1...

9.1CVSS5.8AI score0.00275EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/19 6:30 a.m.17 views

EUVD-2026-13059

Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture allows Using Malicious Files.This issue affects Woocommerce Wholesale Lead Capture: from n/a through 2.0.3.1...

9CVSS5.8AI score0.02317EPSS
SaveExploits3References2
NVD
NVD
added 2026/03/19 6:16 a.m.20 views

CVE-2026-27540

Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture woocommerce-wholesale-lead-capture allows Using Malicious Files.This issue affects Woocommerce Wholesale Lead Capture: from n/a through = 2.0.3.1...

9CVSS0.02317EPSS
SaveExploits3References1
Cvelist
Cvelist
added 2026/03/19 5:24 a.m.40 views

CVE-2026-27540 WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture woocommerce-wholesale-lead-capture allows Using Malicious Files.This issue affects Woocommerce Wholesale Lead Capture: from n/a through = 2.0.3.1...

9CVSS0.02317EPSS
SaveExploits3References1
CVE
CVE
added 2026/03/19 5:24 a.m.136 views

CVE-2026-27540

CVE-2026-27540 is an unauthenticated arbitrary file upload vulnerability in the WordPress WooCommerce Wholesale Lead Capture plugin (

9CVSS5.7AI score0.02317EPSS
SaveIn wildExploits3References1
Positive Technologies
Positive Technologies
added 2026/03/19 12:00 a.m.15 views

PT-2026-26294

CVE-2026-27043 Unrestricted Upload of File with Dangerous Type vulnerability in ThemeGoods Photography allows Path Traversal.This issue affects Photography: from n/a through 7.7.5. https://t.co/2aaKvB4qZZ...

7.2CVSS5.8AI score0.00358EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/03/19 12:00 a.m.19 views

WordPress plugin Photography 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

7.2CVSS5.9AI score0.00358EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/19 12:00 a.m.28 views

WordPress plugin Mobile App Editor 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

9.1CVSS5.9AI score0.00275EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/19 12:00 a.m.16 views

PT-2026-26278

🔴 CVE-2026-27067 - Critical Unrestricted Upload of File with Dangerous Type vulnerability in Syarif Mobile App Editor allows Upload a Web Shell to a Web Server.This issue affects Mobile App Editor: from n/a through ... https://t.co/2PmcdZjLPe https://t.co/HOIpzGKqJA...

9.1CVSS5.8AI score0.00275EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
added 2026/03/19 12:00 a.m.16 views

GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSD files. The...

7.8CVSS6.2AI score0.00755EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/03/09 10:12 p.m.152 views

Exploit for Unrestricted Upload of File with Dangerous Type in Apache Answer

No d...

9.1CVSS5.8AI score0.02459EPSS
SaveExploits1
Rows per page
Query Builder