85869 matches found
CVE-2023-54405: Unrestricted Upload of File with Dangerous Type
H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an unauthenticated arbitrary file upload vulnerability in the /cas/fileUpload/upload endpoint that allows remote attackers to write arbitrary files by manipulating the caller-supplied token parameter...
PT-2026-104281
YesWiki before 4.6.7 contains an unrestricted file upload vulnerability that allows authenticated admins to write remote files into the web-accessible files/ directory via Bazar CSV import preview. Attackers can import a CSV whose file or image field references a remote .php URL, which is saved...
CVE-2026-104637: Unrestricted Upload of File with Dangerous Type
A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function addpatient/addphysician/addaccount/updateaccount/updatesubaccount/editphysician/editpatient of the file php/controller.php. Executing a...
PT-2026-104457
Name of the Vulnerable Software and Affected Versions IDURAR ERP CRM versions prior to 4.1.2 Description Authenticated users can perform stored cross-site scripting by uploading unsanitized SVG files. This occurs when JavaScript-laden SVGs are uploaded via the profile update or settings upload...
PT-2026-104414
Name of the Vulnerable Software and Affected Versions H3C CVM affected versions not specified Description The Cloud Virtualization Management component of the H3C CAS cloud platform contains an unauthenticated arbitrary file upload flaw. Remote attackers can write arbitrary files by manipulating...
CVE-2026-104471: Unrestricted Upload of File with Dangerous Type
YesWiki before 4.6.7 contains an unrestricted file upload vulnerability that allows authenticated admins to write remote files into the web-accessible files/ directory via Bazar CSV import preview. Attackers can import a CSV whose file or image field references a remote .php URL, which is saved...
VulnCheck KEV: CVE-2023-54405
H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an unauthenticated arbitrary file upload vulnerability in the /cas/fileUpload/upload endpoint that allows remote attackers to write arbitrary files by manipulating the caller-supplied token parameter...
WordPress Ninja Forms - File Uploads plugin <= 3.3.34 - Unauthenticated Arbitrary File Upload vulnerability
WordPress Ninja Forms - File Uploads plugin = 3.3.34 - Unauthenticated Arbitrary File Upload vulnerability discovered by daroo in WordPress Plugin Ninja Forms File Uploads Extension versions = 3.3.34...
MCP Atlassian: Arbitrary server-local file upload to Jira/Confluence attachments via unrestricted file_path parameters
SummaryThe Jira and Confluence attachment upload tools accept caller-controlled file path parameters and read those paths from the MCP server's local filesystem before uploading the file as an Atlassian attachment.In local stdio deployments, this can expose files readable by the user's MCP proces...
PYSEC-2026-4092 MCP Atlassian: Arbitrary server-local file upload to Jira/Confluence attachments via unrestricted file_path parameters
Summary The Jira and Confluence attachment upload tools accept caller-controlled file path parameters and read those paths from the MCP server's local filesystem before uploading the file as an Atlassian attachment. In local stdio deployments, this can expose files readable by the user's MCP...
PYSEC-2026-4101 MCP Atlassian: Jira and Confluence attachment upload tools can read arbitrary server-local files
Summary MCP Atlassian exposes Jira and Confluence attachment upload tools that accept arbitrary local filesystem paths and upload those file contents to Atlassian. In HTTP or multi-user deployments, an MCP caller who can invoke write tools can cause the server to read any file accessible to the M...
PYSEC-2026-4098 MCP Atlassian: HTTP upload tools accept arbitrary server-local file paths
sooperset/mcp-atlassian: HTTP upload tools can attach arbitrary server-local files Date: 2026-05-05 Target: sooperset/mcp-atlassian Commit: d8bc78698a63cb6b321c7ca796d6329d448f7f6d Summary mcp-atlassian supports HTTP/SSE deployment for persistent, remote, and multi-user use. In that mode,...
CVE-2026-62071
Unauthenticated SQL Injection in WordPress File Upload = 5.1.10 versions...
EUVD-2026-90852
Unauthenticated SQL Injection in WordPress File Upload = 5.1.10 versions...
CVE-2026-62071
The WordPress File Upload plugin (versions
CVE-2026-62071 WordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerability
Unauthenticated SQL Injection in WordPress File Upload = 5.1.10 versions...
CVE-2026-62071 WordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerability
Unauthenticated SQL Injection in WordPress File Upload = 5.1.10 versions...
Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities (CVE-2024-53677, CVE-2025-23184)
Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2024-53677 DESCRIPTION: File upload logic in Apache Struts is flawed. An attacker can manipulate file upload params to enable paths traversal and under some circumstances this ca...
WordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Andy Urlep in WordPress Plugin WordPress File Upload versions = 5.1.10...
