85727 matches found
CVE-2026-15282
CVE-2026-15282 — Exploit di massa RCE per Instant Appointment filegetcontents + fileputcontents pre-autenticazione → PHP Webshell Panoramica CVE-2026-15282 è una vulnerabilità critica CVSS 9.8 di upload arbitrario di file senza autenticazione nel plugin WordPress Instant Appointment ≤ 1.2. L'azio...
cve-2020-24572
CVE-2020-24572 Eine Schwachstelle wurde in includes/webconsole.php in RaspAP 2.5 entdeckt. Mit authentifiziertem Zugriff kann ein Angreifer eine fehlkonfigurierte und praktisch uneingeschränkte Webkonsole nutzen, um das zugrunde liegende Betriebssystem, auf dem diese Software läuft, anzugreifen u...
CVE-2026-105762
Dify is an open-source LLM app development platform. Prior to 1.13.0, the /console/api/remote-files/upload endpoint in api/controllers/web/remotefiles.py accepted an attacker-controlled URL without authentication and caused the Dify server to retrieve it. A remote attacker could use the endpoint ...
PT-2026-106794
Name of the Vulnerable Software and Affected Versions Payload versions 3.0.1 through 3.89.9 Description Authenticated external URL-based upload retrieval can forward authentication data to a redirected destination that has not been verified as trusted. This behavior may expose a valid session to ...
PT-2026-106795
Name of the Vulnerable Software and Affected Versions Payload versions prior to 3.90.0 Payload canary versions prior to 4.0.0-canary.34 Description A collection that allows downloadable SVG uploads can store a malicious SVG file. This file can bypass sanitization, allowing the execution of...
PT-2026-106755
SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. Prior to 0.261.029, POST /api/group documents/upload stores an attacker-controlled group document filename that group workspaces.html later interpolates into inline Share even...
PT-2026-106429
Subscriber Arbitrary File Upload in WP Duplicate = 1.1.11 versions...
PT-2026-106431
Subscriber Arbitrary File Upload in Taskbot = 6.6 versions...
PT-2026-106405
Name of the Vulnerable Software and Affected Versions Kognetiks Chatbot for WordPress versions prior to 2.5.0 Description An unauthenticated arbitrary file upload issue exists in the Kognetiks Chatbot for WordPress plugin. This allows an attacker to upload files to the server without requiring...
PT-2026-106442
Name of the Vulnerable Software and Affected Versions Doctreat versions prior to 1.7.1 Description An unauthenticated arbitrary file upload issue exists in the Doctreat WordPress theme. This allows an attacker to upload files to the server without requiring authentication. Recommendations Update ...
PT-2026-106433
Employer / Sales Representative Arbitrary File Upload in Workreap Core = 3.4.5 versions...
PT-2026-107140
Name of the Vulnerable Software and Affected Versions CloudVision affected versions not specified Description Insufficient input validation in the Fileserver upload API endpoint allows an authenticated attacker with file upload privileges to perform stored cross-site scripting XSS. This occurs wh...
Security Advisory 0185
Security Advisory 0185 . CSAF PDF Date: October 6, 2026 Revision | Date | Changes ---|---|--- 1.0 | October 6, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-101158 CVSSv3.1 Base Score: 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H CVSSv4.0 Base Score: 9.3...
CVE-2026-105868: Unrestricted Upload of File with Dangerous Type
Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, local upload configurations that accept XML files can store an XML file and stylesheet that execute JavaScript in the Payload origin when a logged-in user...
CVE-2023-43871-WBCE-Arbitrary-File-Upload--XSS---Media
WBCE XSS nel caricamento di file - WBCE v1.6.1 Autore: Sergio Descrizione: La vulnerabilità del caricamento di file in WBCE v.1.6.1 consente a un attaccante locale di caricare un file PDF con XSS nascosto. Vettori d'attacco: Una vulnerabilità nella sanitizzazione del caricamento di file dei Media...
CVE-2026-81780-Hash-Form
CVE-2026-81780-Hash-Form CVE-2026-81780 — Hash Form RCE La vulnerabilità Upload di file non autenticato nel plugin WordPress Hash Form ≤ 1.4.2. Il plugin consente upload di file arbitrari senza una corretta autenticazione o validazione del tipo di file, portando a Remote Code Execution RCE. Caten...
cve-2023-41564-research
Sintesi della vulnerabilità CVE-2023-41564 CVE-2023-415641 è una vulnerabilità di tipo XSS persistente presente nel CMS Cockpit = v2.6.3. Caricando un file HTML con estensione .shtml durante l'upload, JavaScript viene eseguito nel momento in cui si apre il file caricato. 1:...
CVE-2022-32074
CVE-2022-32074 per osTicket | Sistema di ticketing per il supporto 1. Find the file listing directory, the root of the file download directoryм fileuploads this is an example. 2. Load the following xssPayload.svg and open it Esempio:...
chamilo-lms-unauthenticated-big-upload-rce-poc
Chamilo LMS - PoC per RCE tramite Big Upload File non autenticato Questo è uno script scritto in Python che consente lo sfruttamento della falla di sicurezza del software Chamilo LMS descritta in CVE-2023-4220. Il sistema è vulnerabile nelle versioni precedenti la 1.11.24. Utilizzo Clona il...