CVE-2023-25202

CVE-2023-25202: 不安全的文件上传机制 描述 CVE-2023-25202 涉及 Therefore 应用程序中的一个不安全文件上传机制，该机制对用户可上传的文件类型过于宽松。应用程序仅阻止上传 HTML、EXE 和 BAK 文件，导致其对 PHP、ASP、ASPX 和 JSP 等技术文件的上传存在漏洞。这些文件类型在某些条件下可能允许执行系统命令，尽管在此上下文中不可利用。 该应用程序针对 HTML 文件上传的安全防护可以通过上传支持 HTML 的 Markdown...

CVE-2022-0486

Fidelis Network and Deception - CVE-2022-0486 - 不安全的文件权限权限提升 - 多个漏洞 发布与致谢 所有漏洞利用均已获得美国政府批准公开释放。特别感谢负责批准无限制分发文档的军人和政府联络人员。请参考以下 OTR 编号： OTR-2022-00482 OTR-2022-00483 OTR-2022-00484 OTR-2022-00485 OTR-2022-00486 OTR-2022-00488 OTR-2022-00489 OTR-2022-00490 元数据 日期： 20220517 2005H UTC 漏洞利用作者： Henry...

CVE-2025-54962

🔥 CVE-2025-54962 — Carga de archivos insegura en el servidor web de OpenPLC Runtime OpenPLC Runtime ≤ 2024-12-31 — XSS almacenado, CSRF 📌 Resumen Descubrí una vulnerabilidad en el servidor web de OpenPLC Runtime versión publicada: 2024-12-31 que permite a los usuarios autenticados subir archivos...

lazyweb

LazyWeb - Aplicación Web Vulnerable LazyWeb es una aplicación web de demostración diseñada para mostrar vulnerabilidades comunes del lado del servidor. Cada vulnerabilidad está categorizada con su respectiva calificación de dificultad para proporcionar una experiencia de aprendizaje integral para...

CVE-2025-60500

CVE-2025-60500 — 不安全的文件上传 / QDocs Smart School 中的逻辑缺陷（Smart School 7.1） 发布日期： 2025-10-17 作者 / 发现者： Lebas Vivien 状态： 已保留 CVE： CVE-2025-60500（已保留） 摘要 QDocs Smart School — 学校管理系统 7.1 中存在一个不安全的文件上传 / 逻辑缺陷，允许具有 accountant 、admin 或 superadmin 等角色的已认证用户通过滥用备选的 YouTube URL 选项来绕过媒体上传功能中的文件类型限制。此缺陷允许攻击者将任意...

CVE-2023-47464

Informe de Evaluación de Seguridad del Router GL-AX1800 Resumen Este informe describe los hallazgos de una evaluación de seguridad exhaustiva realizada en el router GL-AX1800 fabricado por GL.iNet. La evaluación tuvo como objetivo identificar posibles vulnerabilidades y debilidades en las medidas...

CVE-2026-0911

CVE-2026-0911 — Hustle 模块导入 PoC 针对 WordPress 插件 Hustle （wordpress-popup，WPMU DEV）的 CVE-2026-0911 内的 wphandleupload 调用以 testtype = false 执行，导致文件类型验证薄弱；即使导入后的 JSON 验证失败，上传的文件也可能 不会被删除 （“孤儿”文件）。如果服务器在 wp-content/uploads 下执行 PHP，这实际上可能成为通向远程代码执行的链条的一部分。在已修补版本中，引入了 testtype = true 和临时 uploadmimes 来限制...

CVE-2026-73720

Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2026-73720 Authenticated Insecure File Handling allows Remote Code Execution in HPE Networking Fabric Composer API

Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system...

EUVD-2026-69447

Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2026-73720

HPE Networking Fabric Composer contains insecure file operations in its API that could allow an authenticated remote attacker to achieve remote code execution . Successful exploitation permits an attacker to execute arbitrary commands as a privileged user on the underlying operating system, resul...

CVE-2025-57392

CVE-2025-57392 🔒 Informe de Vulnerabilidad de Seguridad Producto: BenimPOS Desktop V3.0 Tipo de Vulnerabilidad: Permisos de Archivo Inseguros Componentes Afectados: BenimPOS.exe, unins000.exe, System.Data.SQLite.dll Clase de Vulnerabilidad: CWE-276: Permisos Predeterminados Incorrectos Prueba de...

Mohnad-AL-saif-CVE-2020-11107-XAMPP-Local-Privilege-Escalation

🧨 CVE-2020-11107 – XAMPP Local Privilege Escalation Windows 📌 Overview CVE-2020-11107 is a Local Privilege Escalation LPE vulnerability affecting Apache Friends XAMPP on Windows. An unprivileged user can modify the XAMPP Control Panel configuration file xampp-control.ini and replace the default...

CVE-2026-81682

opensslencrypt versions before 1.4.9 contain an insecure file permissions vulnerability in the desktop GUI that writes decrypted plaintext with world-readable default permissions. Attackers can read decrypted output files created by the GUI as unprivileged local users on multi-user systems...

CVE-2026-81682 openssl_encrypt before 1.4.9 Insecure File Permissions

opensslencrypt versions before 1.4.9 contain an insecure file permissions vulnerability in the desktop GUI that writes decrypted plaintext with world-readable default permissions. Attackers can read decrypted output files created by the GUI as unprivileged local users on multi-user systems...

EUVD-2026-66287

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files...

CVE-2026-78553

RansomLook created its Flask session-signing key without explicitly restricting the file permissions. The secretkey file was created using the process's default permissions and umask, resulting in permissions such as 0644 under a common 022 umask. Consequently, other local users able to access th...

CVE-2026-78553 Insecure Flask Secret-Key File Permissions Allow Local Administrator Session Forgery in RansomLook

RansomLook created its Flask session-signing key without explicitly restricting the file permissions. The secretkey file was created using the process's default permissions and umask, resulting in permissions such as 0644 under a common 022 umask. Consequently, other local users able to access th...

EUVD-2026-65089

RansomLook created its Flask session-signing key without explicitly restricting the file permissions. The secretkey file was created using the process's default permissions and umask, resulting in permissions such as 0644 under a common 022 umask. Consequently, other local users able to access th...

Astra Linux – Vulnerability in open-vm-tools

VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper with local files to trigger insecure file operations within that VM...