EUVD-2026-89469

The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and execute arbitrary PHP files on the web server...

CVE-2026-102137: Unrestricted Upload of File with Dangerous Type

An authenticated administrator could bypass the content validation applied to an administrative file upload and store a file containing dangerous content on the appliance. This did not by itself result in code execution, which would require a separate vulnerability to run the stored file...

PT-2026-103614

Name of the Vulnerable Software and Affected Versions DB-GPT versions 0.7.5 and 0.8.0 Description A directory traversal issue exists in the python file upload function within the endpoint packages/dbgpt-app/src/dbgpt app/openapi/api v1/python upload api.py:42. This allows a remote attacker to wri...

PT-2026-103024

Name of the Vulnerable Software and Affected Versions Zella Theme versions prior to 2.6.3 Description An unrestricted file upload issue exists in the Zella Theme for WordPress. The software fails to perform capability or nonce checks on a font upload action, which is accessible to unauthenticated...

PT-2026-103570

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An authenticated administrator can bypass content validation during an administrative file upload, allowing the storage of files containing dangerous content on...

CVE-2026-102427: Unrestricted Upload of File with Dangerous Type

Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK 8.3.16 - site/uploader.php is reached through the component’s normal frontend routing task=getContent, a task with no authentication or ACL check anywhere in the dispatch chain. The handler validates th...

PT-2026-103075

Name of the Vulnerable Software and Affected Versions Viable URL Media Uploader versions prior to 1.0.1 Description Insufficient input sanitization and output escaping allow authenticated attackers with Author-level access and above to perform Stored Cross-Site Scripting XSS. This occurs through...

CVE-2026-102454: Unrestricted Upload of File with Dangerous Type

EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

PT-2026-103030

The All in One Files Upload WordPress plugin before 2.0.17 adds SVG to the site's allowed upload types and does not sanitise uploaded files or verify the authenticity of its public upload requests, allowing unauthenticated users to store files containing active content which run in the site's...

CVE-2026-75873: Unrestricted Upload of File with Dangerous Type

The Zella Theme WordPress theme before 2.6.3 does not perform any capability or nonce check on one of its font upload actions, which is available to unauthenticated users, allowing them to upload arbitrary files, including PHP ones, and achieve remote code execution...

CVE-2026-85573: Improper Neutralization of Input During Web Page Generation

The All in One Files Upload WordPress plugin before 2.0.17 adds SVG to the site's allowed upload types and does not sanitise uploaded files or verify the authenticity of its public upload requests, allowing unauthenticated users to store files containing active content which run in the site's...

PT-2026-103076

Name of the Vulnerable Software and Affected Versions EasyFlow .NET affected versions not specified Description An arbitrary file upload flaw allows privileged remote attackers to upload and execute web shell backdoors, which can lead to arbitrary code execution on the server. Recommendations At...

PT-2026-103328

Name of the Vulnerable Software and Affected Versions OrdaSoft Joomla CCK versions prior to 8.3.16 Description An unauthenticated remote code execution issue exists in the site/uploader.php endpoint, which is accessible via the getContent task. The system fails to perform authentication or Access...

xss-methodology

XSS Methodology Not a payload list. This covers how to find X...

CVE-2026-70356

The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and execute arbitrary PHP files on the web server...

EUVD-2026-88751

The mechanism binding API-uploaded files to the uploader's authentication method is not working correctly and the same session token is used for all token-based API users. Since API-uploaded files are refered to by randomly generated UUIDs and only exist for a day, there is virtually no risk, but...

CVE-2026-8066

A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in...

CVE-2026-7395

Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration file upload, leading to information disclosure and integrity compromise. The HTTPPublishAdapterTestServlet is specifically meant for testing purposes to be used in a non-production...

CVE-2026-7395

The Asset Suite software contains a vulnerability allowing unauthenticated users to access the HTTPPublishAdapterTestServlet . This component, intended strictly for testing in non-production environments, can be exploited to perform configuration file uploads . Successful exploitation may lead to...

EUVD-2026-88691

Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration file upload, leading to information disclosure and integrity compromise. The HTTPPublishAdapterTestServlet is specifically meant for testing purposes to be used in a non-production...