PT-2026-68671

Name of the Vulnerable Software and Affected Versions SourceCodester Online Examination & Learning Management System version 1.0 Description An issue exists in the processing of the 'upload files.php' endpoint, which allows for unrestricted file upload. This flaw can be exploited remotely to uplo...

PT-2026-68581

Name of the Vulnerable Software and Affected Versions Type Hub versions prior to 2.0.7 Description An unauthenticated arbitrary file upload issue exists, allowing an attacker to upload files to the server without providing credentials. Recommendations Update to a version newer than 2.0.6...

PT-2026-68778

Name of the Vulnerable Software and Affected Versions ICS-Park Smart Park Management System version 2.0 Description The file upload module contains an unrestricted file upload flaw. This allows a remote attacker to upload malicious files and execute arbitrary code on the system. Recommendations A...

PT-2026-68978

Impact Public frontend forms did not enforce the file upload restrictions that the Control Panel enforces, so an unauthenticated visitor could upload file types an administrator had intended to disallow through a form's assets or files field. For assets fields, files could be stored on a public,...

CVE-2026-67688

ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module. This allows a remote attacker to execute arbitrary code...

CVE-2026-67688: Unrestricted Upload of File with Dangerous Type

ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module. This allows a remote attacker to execute arbitrary code...

CVE-2026-3418: Unrestricted Upload of File with Dangerous Type

The System REST API accepts user-supplied file uploads without enforcing sufficient validation on the file type or destination, allowing files to be written to arbitrary server-accessible locations. Exploitation requires authenticated administrative access with publisher privileges. Successful...

CVE-2026-67688

ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module. This allows a remote attacker to execute arbitrary code...

CVE-2025-15678: Improper Neutralization of Input During Web Page Generation

The Nexter Blocks WordPress plugin before 5.0.2 does not sanitize uploaded SVG files and allows SVG uploads for any user able to upload files Author by default, allowing them to upload a file containing malicious JavaScript that executes when the file is accessed, leading to Stored Cross-Site...

CVE-2026-18969

CVE-2026-18969 – Rongzhitong Visual Integrated Command and Dispatch Platform A vulnerability exists in the file upload path /dm/dispatch/userinfo/upload where argument manipulation of the File parameter enables unrestricted uploads. This could allow remote initiation of an attack with no required...

CVE-2026-18969 Rongzhitong Visual Integrated Command and Dispatch Platform upload unrestricted upload

A vulnerability was detected in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. Impacted is an unknown function of the file /dm/dispatch/userinfo/upload. Performing a manipulation of the argument File results in unrestricted upload. It is possible to initiate the attac...

Malicious code in app-api-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2be81204ed300a759662ca3315431eec9dbb11392232f04cc58d1a815fb94b4 On npm install, scripts.postinstall executes test.js, which performs three attacker-beneficial actions against the installer's host. First, it...

Cross-site Request Forgery (CSRF)

Overview @theia/filesystem is a Theia - FileSystem Extension Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF through the NodeFileUploadService handler in the filesystem backend code. An attacker can overwrite any filesystem path the backend process can write by...

WordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerability

SQL Injection vulnerability discovered by daroo in WordPress Plugin WordPress File Upload versions = 5.1.7...

CVE-2026-18933 wp-downloadmanager - Unrestricted File Upload via Missing Extension/MIME Validation and Path Traversal

The wp-downloadmanager WordPress plugin, in version 1.68.11 also affecting the 6.9.4 release line, allows an admin-privileged user currentusercan'managedownloads' to upload arbitrary files via download-add.php with no extension or MIME-type validation of any kind - no wpcheckfiletypeandext, no...

CVE-2026-18933

The wp-downloadmanager WordPress plugin, in version 1.68.11 also affecting the 6.9.4 release line, allows an admin-privileged user currentusercan'managedownloads' to upload arbitrary files via download-add.php with no extension or MIME-type validation of any kind - no wpcheckfiletypeandext, no...

EUVD-2026-53330

The wp-downloadmanager WordPress plugin, in version 1.68.11 also affecting the 6.9.4 release line, allows an admin-privileged user currentusercan'managedownloads' to upload arbitrary files via download-add.php with no extension or MIME-type validation of any kind - no wpcheckfiletypeandext, no...

CVE-2026-18933 wp-downloadmanager - Unrestricted File Upload via Missing Extension/MIME Validation and Path Traversal

The wp-downloadmanager WordPress plugin, in version 1.68.11 also affecting the 6.9.4 release line, allows an admin-privileged user currentusercan'managedownloads' to upload arbitrary files via download-add.php with no extension or MIME-type validation of any kind - no wpcheckfiletypeandext, no...

CVE-2026-18933

The wp-downloadmanager plugin (v1.68.11, also affecting the 6.9.4 line) allows an admin user to upload arbitrary files via download-add.php without any extension/MIME validation or traversal protection. The destination path is built from unsanitized $_POST['file_upload_to'], and since the base pa...

CVE-2026-60009

In Eclipse Theia versions up to and including 1.73.1, the @theia/filesystem backend binds POST /file-upload in every filesystem-enabled deployment. The handler takes an attacker-supplied absolute path from the multipart uri field and calls fs.movetmp, target, overwrite: true with no workspace...