47896 matches found
CVE-2021-47888
Textpattern versions prior to 4.8.3 contain an authenticated remote code execution vulnerability that allows logged-in users to upload malicious PHP files. Attackers can upload a PHP file with a shell command execution payload and execute arbitrary commands by accessing the uploaded file through ...
CVE-2025-10856
Unrestricted Upload of File with Dangerous Type vulnerability in Solvera Software Services Trade Inc. Teknoera allows File Content Injection.This issue affects Teknoera: through 01102025...
Exploit for Unrestricted Upload of File with Dangerous Type in Smartertools Smartermail
CVE-2025-52691 / WT-2026-0001 SmarterMail Exploit 🚨 IMPORT...
CVE-2026-1331
MeetingHub developed by HAMASTAR Technology has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...
WordPress KiviCare - Clinic & Patient Management System (EHR) plugin <= 3.6.15 - Missing Authorization to Unauthenticated Limited Arbitrary File Upload vulnerability
WordPress KiviCare - Clinic & Patient Management System EHR plugin = 3.6.15 - Missing Authorization to Unauthenticated Limited Arbitrary File Upload vulnerability discovered by Sarawut Poolkhet MisterHelloz in WordPress Plugin KiviCare versions = 3.6.15...
CVE-2026-24010
Horilla is a free and open source Human Resource Management System HRMS. A critical File Upload vulnerability in versions prior to 1.5.0, with Social Engineering, allows authenticated users to deploy phishing attacks. By uploading a malicious HTML file disguised as a profile picture, an attacker...
CVE-2026-0927
The KiviCare – Clinic & Patient Management System EHR plugin for WordPress is vulnerable to arbitrary file uploads due to missing authorization checks in the uploadMedicalReport function in all versions up to, and including, 3.6.15. This makes it possible for unauthenticated attackers to upload...
CVE-2026-0927 KiviCare – Clinic & Patient Management System (EHR) <= 3.6.15 - Missing Authorization to Unauthenticated Limited Arbitrary File Upload
The KiviCare – Clinic & Patient Management System EHR plugin for WordPress is vulnerable to arbitrary file uploads due to missing authorization checks in the uploadMedicalReport function in all versions up to, and including, 3.6.15. This makes it possible for unauthenticated attackers to upload...
CVE-2026-0927
CVE-2026-0927 affects KiviCare – Clinic & Patient Management System (EHR) WordPress plugin; all versions up to 3.6.15 are vulnerable to arbitrary file uploads due to missing authorization in uploadMedicalReport(). This enables unauthenticated attackers to upload text files or PDFs to the site, po...
GO-2026-4313 Gin-vue-admin has arbitrary file upload vulnerability caused by path traversal in github.com/flipped-aurora/gin-vue-admin
Gin-vue-admin has arbitrary file upload vulnerability caused by path traversal in github.com/flipped-aurora/gin-vue-admin...
CVE-2025-69828
File Upload vulnerability in TMS Global Software TMS Management Console v.6.3.7.27386.20250818 allows a remote attacker to execute arbitrary code via the Logo upload in /Customer/AddEdit...
PT-2026-4515
Name of the Vulnerable Software and Affected Versions YetiShare File Hosting Script version 5.1.0 Description The software contains a server-side request forgery condition that allows attackers to read local system files through the remote file upload feature. Attackers can exploit the url...
WordPress plugin KiviCare – Clinic & Patient Management System (EHR) has security vulnerabilities.
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
PhreeBooks security vulnerabilities
PhreeBooks is a business resource planning and accounting software developed by the PhreeBooks company. Version 5.2.3 of PhreeBooks contains a security vulnerability, which stems from a file upload vulnerability in the Image Manager, potentially allowing remote code execution...
Exploit for CVE-2024-9932
CVE-2024-9932 / 0-Click RCE Exploit - Author: Joshua Provoste...
Exploit for Unrestricted Upload of File with Dangerous Type in Lindeni Multi_Purpose_Mail_Form
CVE-2024-50526 / 0-Click RCE Exploit - Author: Joshua Provost...
Exploit for Unrestricted Upload of File with Dangerous Type in Webfulcreations Computer_Repair_Shop
CVE-2024-51793 / 0-Click RCE Exploit - Author: Joshua Provost...
CVE-2026-Pending-Django-Summernote-RCE
CVE-2026-XXXXX Pending: django-summernote Arbitrary File Upl...
