Lucene search
+L

1467 matches found

NVD
NVD
added 2026/06/25 7:16 p.m.19 views

CVE-2026-57700

Unrestricted Upload of File with Dangerous Type vulnerability in Daan.Dev OMGF Pro allows Using Malicious Files. This issue affects OMGF Pro: from n/a through 5.2.6...

10CVSS0.00522EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/25 5:29 p.m.97 views

CVE-2026-57700

CVE-2026-57700 is an unrestricted file upload vulnerability in the WordPress plugin OMGF Pro by Daan.Dev, affecting versions through 5.2.6 . Discovered by NETZLICHT , the flaw allows unauthenticated attackers to upload malicious files of dangerous types, leading to remote code execution (RCE) on ...

10CVSS5.8AI score0.00522EPSS
SaveIn wildExploits0References1
attackerkb
attackerkb
added 2026/06/25 5:29 p.m.14 views

CVE-2026-57700

Unrestricted Upload of File with Dangerous Type vulnerability in Daan.Dev OMGF Pro allows Using Malicious Files. This issue affects OMGF Pro: from n/a through 5.2.6...

10CVSS5.8AI score0.00522EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/25 12:00 a.m.41 views

PT-2026-52555

Name of the Vulnerable Software and Affected Versions OMGF Pro versions prior to 5.2.7 Description An unrestricted file upload flaw allows unauthenticated users to upload malicious files of dangerous types. This issue can lead to remote code execution RCE, which is the ability of an attacker to...

10CVSS6.6AI score0.00522EPSS
SaveExploits0References7
VulnCheck KEV
VulnCheck KEV
added 2026/06/25 12:00 a.m.13 views

VulnCheck KEV: CVE-2026-57700

Unrestricted Upload of File with Dangerous Type vulnerability in Daan.Dev OMGF Pro allows Using Malicious Files. This issue affects OMGF Pro: from n/a through 5.2.6...

10CVSS5.8AI score0.00522EPSS
SaveIn wildExploits0References2
GithubExploit
GithubExploit
added 2026/06/24 10:38 p.m.105 views

Exploit for Unrestricted Upload of File with Dangerous Type in Gvectors Wpdiscuz

CVE-2020-24186 Exploi...

10CVSS7.3AI score0.94616EPSS
SaveExploits19
IBM Security Bulletins
IBM Security Bulletins
added 2026/06/24 4:05 p.m.24 views

Security Bulletin: Unrestricted upload of file with dangerous type, improper certificate validation, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service

Summary IBM Storage Defender - Resiliency Service is vulnerable to unrestricted upload of file with dangerous type, improper certificate validation, and others. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-3219 DESCRIPTION: pip handles concatenated tar and ZIP fil...

9.1CVSS6.3AI score0.00715EPSS
SaveExploits2Affected Software1
CVE
CVE
added 2026/06/23 4:08 p.m.73 views

CVE-2026-50023

CVE-2026-50023 affects yt-dlp. Before 2026-06-09, an issue allowed remote attackers to write arbitrary OS-shortcut files (e.g., .desktop, .url, .webloc) via the --write-link option by exploiting unsafe extensions that were on the allowlist, bypassing the prior CVE-2024-38519 remediation. This cou...

9.6CVSS6AI score0.00665EPSS
SaveExploits1References4Affected Software1
EUVD
EUVD
added 2026/06/16 10:39 a.m.23 views

EUVD-2026-37065

Unrestricted Upload of File with Dangerous Type vulnerability in themagnifico52 Kids Online Store allows Upload a Web Shell to a Web Server. This issue affects Kids Online Store: from n/a through 0.8.9...

9.9CVSS5.2AI score0.00273EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/12 3:16 p.m.26 views

CVE-2026-6211

Unrestricted upload of file with dangerous type vulnerability in Global IT Informatics Services Inc. WEOLL allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WEOLL: from 2.0.9 before 3.2.45.33...

8.7CVSS0.0021EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/12 2:10 p.m.26 views

EUVD-2026-36437

Unrestricted upload of file with dangerous type vulnerability in Global IT Informatics Services Inc. WEOLL allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WEOLL: from 2.0.9 before 3.2.45.33...

8.7CVSS5.2AI score0.0021EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/12 12:00 a.m.60 views

PT-2026-48884

Name of the Vulnerable Software and Affected Versions WEOLL versions 2.0.9 through 3.2.45.32 Description An unrestricted file upload flaw allows the upload of dangerous file types. This issue enables attackers to access functionality that is not properly constrained by Access Control Lists ACLs,...

8.7CVSS5.2AI score0.0021EPSS
SaveExploits0References3
NVD
NVD
added 2026/06/11 4:16 p.m.26 views

CVE-2026-11839

Unrestricted upload of file with dangerous type vulnerability in Başarsoft Information Technologies Inc. Rotaban allows Upload a Web Shell to a Web Server. This issue affects Rotaban: from V2026.06.002 before V2026.06.003...

9.9CVSS0.00335EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/11 1:16 p.m.23 views

CVE-2026-7852

Unrestricted upload of file with dangerous type vulnerability in Limatek System Inc. LimRAD NAC allows Remote Code Inclusion. This issue affects LimRAD NAC: before 5.5.7.3.9...

9.8CVSS0.00358EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/11 11:36 a.m.24 views

EUVD-2026-36237

Unrestricted upload of file with dangerous type vulnerability in Limatek System Inc. LimRAD NAC allows Remote Code Inclusion. This issue affects LimRAD NAC: before 5.5.7.3.9...

9.8CVSS5.6AI score0.00358EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/11 12:00 a.m.36 views

PT-2026-48670

Unrestricted upload of file with dangerous type vulnerability in Başarsoft Information Technologies Inc. Rotaban allows Upload a Web Shell to a Web Server. This issue affects Rotaban: from V2026.06.002 before V2026.06.003...

9.9CVSS5.4AI score0.00335EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/06/11 12:00 a.m.53 views

Başarsoft Rotaban 代码问题漏洞

Başarsoft Rotaban is a service route optimization platform developed by the Turkish company Başarsoft. Versions of Başarsoft Rotaban prior to V2026.06.002 and V2026.06.003 contained code vulnerabilities. These vulnerabilities stemmed from the unlimited upload of dangerous type files, which could...

9.9CVSS5.4AI score0.00335EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/10 12:00 a.m.32 views

PT-2026-48380

Name of the Vulnerable Software and Affected Versions yt-dlp versions prior to 2026.06.09 Description When using aria2c as an external downloader for fragmented manifest formats like HLS or DASH streams, insufficiently sanitized input allows an attacker to perform arbitrary file writes. This occu...

9.6CVSS6AI score0.00465EPSS
SaveExploits0References25
Github Security Blog
Github Security Blog
added 2026/06/09 9:32 a.m.14 views

Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. A crafted TIFF image could trigger excessive memory allocation during image decoding, allowing an authenticated user to cause the server process to crash. Users are...

6.5CVSS5.4AI score0.0048EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/06/09 9:32 a.m.12 views

GHSA-V553-G2W6-295P Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. A crafted TIFF image could trigger excessive memory allocation during image decoding, allowing an authenticated user to cause the server process to crash. Users are...

6.5CVSS5.4AI score0.0048EPSS
SaveExploits0References6
Rows per page
Query Builder