CVE-2026-52680_exploit

CVE-2026-52680 — Apache Kyuubi REST Batch: Beliebiges Dateischreiben durch Pfad-Traversal Nicht authentifiziertes beliebiges Dateischreiben in der Apache Kyuubi-REST-API über den Multipart-Batch-Submission-Endpunkt. POST /api/v1/batches multipart/form-data schreibt den resourceFile-Teil mit dem v...

Ashwesker-CVE-2026-21440

🚨 CVE-2026-21440 — Vulnerabilità di Sicurezza Critica 🧩 Riepilogo CVE-2026-21440 è una vulnerabilità critica di path traversal che colpisce il framework AdonisJS , in particolare la gestione dell'upload di file multipart. ⚠️ Se sfruttata, gli attaccanti possono scrivere file ovunque sul server ,...

multiparty-CVE-2026-8161

CVE-2026-8161 Prova di concetto di CVE-2026-8161 Multiparty Descrizione [email protected] e versioni precedenti sono vulnerabili a denial of service tramite un'eccezione non gestita. Il parser memorizza i campi e i file caricati in normali oggetti JavaScript e non distingue in modo sicuro le...

CVE-2026-80050 ContiNew Admin through 4.1.0 Missing Authorization and File-Type Allowlist on Multipart Upload Endpoints

ContiNew Admin fails to apply file-upload permission checks or file-type allowlist validation to multipart upload endpoints, allowing authenticated users to store files with arbitrary extensions. Attackers can initialize chunked uploads, send file parts, and complete uploads to leave arbitrary...

CVE-2026-80050 ContiNew Admin through 4.1.0 Missing Authorization and File-Type Allowlist on Multipart Upload Endpoints

ContiNew Admin fails to apply file-upload permission checks or file-type allowlist validation to multipart upload endpoints, allowing authenticated users to store files with arbitrary extensions. Attackers can initialize chunked uploads, send file parts, and complete uploads to leave arbitrary...

CVE-2026-80050

ContiNew Admin versions through 4.1.0 contain a missing authorization and file-type allowlist vulnerability in its multipart upload endpoints (specifically MultipartUploadController). Authenticated users can initialize chunked uploads, send file parts, and complete uploads with arbitrary file ext...

Astra Linux – Vulnerability in Tomcat9

Improper resource shutdown or release vulnerabilities in Apache Tomcat. If an error occurs including exceeding limits during the processing of a multipart upload, temporary copies of the uploaded parts that were written to disk are not deleted immediately but are left for the garbage collection...

CVE-2026-55241

Checkmate , an open-source self-hosted server monitoring tool, is vulnerable to a pre-authentication denial of service in versions prior to 3.9.1 . The public POST /api/v1/auth/register endpoint processes multipart profileImage uploads through in-memory Multer parsing before registration or invit...

EUVD-2026-64037

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. Prior to 3.9.1, the public POST /api/v1/auth/register route in server/src/api/routes/authRoutes.ts passes multipart...

CVE-2026-48753

Incus (a system container and VM manager) prior to version 7.1.0 is vulnerable to path traversal in its S3 protocol multipart upload endpoint. The root cause is an unsanitized user-controlled uploadId parameter in internal/server/storage/s3/local/multipart.go, which allows an attacker to write ar...

CVE-2026-48753

Incus is a system container and virtual machine manager. Prior to version 7.1.0, the S3 protocol upload endpoint is vulnerable to path traversal and allows creation of arbitrary files on the host. This behavior could lead to arbitrary command execution. Version 7.1.0 fixes the issue...

CVE-2026-48753 Incus has an arbitrary file write via path traversal in S3 multipart upload

Incus is a system container and virtual machine manager. Prior to version 7.1.0, the S3 protocol upload endpoint is vulnerable to path traversal and allows creation of arbitrary files on the host. This behavior could lead to arbitrary command execution. Version 7.1.0 fixes the issue...

CVE-2026-48753 Incus has an arbitrary file write via path traversal in S3 multipart upload

Incus is a system container and virtual machine manager. Prior to version 7.1.0, the S3 protocol upload endpoint is vulnerable to path traversal and allows creation of arbitrary files on the host. This behavior could lead to arbitrary command execution. Version 7.1.0 fixes the issue...

GHSA-RGR9-R7MJ-MF6X Tina: Cross-origin `POST /media/upload/*` requests can write arbitrary files into the Tina dev server media root

Summary A browser-based cross-origin request flaw in the Tina dev server allows an attacker-controlled website to cause arbitrary file creation inside the configured media upload directory on a developer machine running tinacms dev. No manual file upload is required. The attacker page builds the...

Tina: Cross-origin `POST /media/upload/*` requests can write arbitrary files into the Tina dev server media root

Summary A browser-based cross-origin request flaw in the Tina dev server allows an attacker-controlled website to cause arbitrary file creation inside the configured media upload directory on a developer machine running tinacms dev. No manual file upload is required. The attacker page builds the...

CVE-2022-4995

Weaver Fanwei E-cology 9.0 versions prior to 10.52 contain a file upload vulnerability that allows a remote, unauthenticated attacker to upload arbitrary files, including JSP webshells, by submitting a multipart/form-data POST request to /workrelate/plan/util/uploaderOperate.jsp with arbitrary...

Exploit for CVE-2026-13714

CVE-2026-13714 Realtyna Organic IDX plugin + WPL Real Estate &...

SUSE CVE-2026-52811

Gogs is an open source self-hosted Git service. Prior to 0.14.3, Repository.UploadRepoFiles checks for symlinks only on the leaf of the upload target osx.IsSymlinktargetPath. The siblings UpdateRepoFile, DeleteRepoFile, and GetDiffPreview use hasSymlinkInPath, which lstats every component -...

EUVD-2026-51185

Apache Kyuubi REST batch multipart upload handling uses the client-supplied multipart filename when creating a temporary uploaded resource. A remote attacker who can access the REST batch upload endpoint can provide path traversal sequences in the filename and cause the Kyuubi server process to...

CVE-2026-66063

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/updown.go multipart upload handler split part.FileName on / but did not reject .., allowing an unauthenticated upload with filename .. to create a file outside the served tree. This...