Worpress-CVE-2023-5360

CVE-2023-5360 CVE-2023-5360 رفع شل تلقائي لـ WordPress Royal Elementor 1.3.78 رفع شل زر https://phankz.com...

CVE-2026-92247

SynaptikCMS File Manager — RCE authentifiée Vulnérabilité SynaptikCMS File Manager Authenticated Remote Code Execution Le gestionnaire de fichiers de SynaptikCMS permet à un attaquant authentifié de téléverser un fichier puis de le renommer en fichier PHP. Ce comportement de téléversement et de...

CVE-2026-38526

CVE-2026-38526 — Krayin CRM ≤ 2.2.x Authenticated RCE ⚠️ Avertissement légal : ce code est fourni à des fins éducatives et pour des tests autorisés uniquement CTF, bug bounty, labo privé. L'auteur n'est pas responsable d'une utilisation illégale. Description Krayin CRM Webkul ≤ 2.2.x expose...

vuln-chain-lab

File Upload Bypass + Stored XSS PoC Lab A deliberately vulnerable web application demonstrating how a file upload bypass chains with stored XSS to create backdoor admin accounts, even when CSP, CORS, and CSRF protections are in place. Full Blog Post: KurtiseBear Blog This is an educational lab fo...

Payload external upload trust validation issue

Impact Under certain external upload configurations, Payload could send authentication data to a destination that was not verified as trusted. If the affected request contained a valid session, this could expose that session to an unintended recipient. You are affected if: - You have enabled...

EUVD-2026-93507

Payload external upload trust validation issue...

GHSA-PJ5H-5Q6C-3PFX Payload external upload trust validation issue

Impact Under certain external upload configurations, Payload could send authentication data to a destination that was not verified as trusted. If the affected request contained a valid session, this could expose that session to an unintended recipient. You are affected if: - You have enabled...

NPM: Payload external upload trust validation issue

NPM: Payload external upload trust validation issue vulnerability discovered by ? in WordPress Npm payload versions = 3.0.0, 3.90.0...

Payload: Bypassed sanitization of user uploaded SVGs

Impact A malicious SVG file upload could bypass sanitization, be stored, and execute attacker-controlled JavaScript XSS after a user downloads it and opens it. You are affected if: - You have a collection configured to upload and allow SVG files which can then be downloaded by users. Patches The...

GHSA-P223-2WR2-J562 Payload: Incomplete validation during the upload file lifecycle

Impact Under certain conditions, an authenticated user with permission to modify uploads could cause unintended files to be removed during file cleanup. This may result in data loss or service disruption. You are affected if: - You use Payload upload collections with local file storage. - Untrust...

NPM: Payload: Incomplete validation during the upload file lifecycle

NPM: Payload: Incomplete validation during the upload file lifecycle vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...

Payload: Incomplete validation during the upload file lifecycle

Impact Under certain conditions, an authenticated user with permission to modify uploads could cause unintended files to be removed during file cleanup. This may result in data loss or service disruption. You are affected if: - You use Payload upload collections with local file storage. - Untrust...

Payload: Uploaded XML files could execute same-origin JavaScript

Impact Under certain local upload configurations, an uploaded XML file and stylesheet could execute JavaScript in the Payload origin when a logged-in user opens the file. You are affected if: - You accept XML uploads accepted by default. Patches Users should upgrade Payload packages to = 3.90.0 o...

WordPress Bricksforge plugin <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter vulnerability

Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter vulnerability discovered by d.v4ns3c in WordPress Plugin Bricksforge versions = 3.1.8.9...

WordPress Super Forms plugin <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File Upload via 'extensions' Form Element Attribute vulnerability

Authenticated Subscriber+ Arbitrary File Upload via 'extensions' Form Element Attribute vulnerability discovered by d.v4ns3c in WordPress Plugin Super Forms versions = 6.3.316...

Popcorn-TJNULL-OSCP-

هاك ذا بوكس: شرح Popcorn التاريخ: 05 يونيو 2026 الصعوبة: سهلة المنصة: HackTheBox التقنيات الرئيسية: تعداد المنافذ والخدمات، اختبار الدلائل Gobuster، تجاوز رفع الملفات، التلاعب بطلبات HTTP Burp Suite، تنفيذ الأكواد عن بُعد RCE، تثبيت شل TTY متقدم Python، استغلال Kernel/PAM المحلي التلاعب بملف MOTD...

CVE-2025-64095

=== الوصف === DNN سابقًا DotNetNuke هي منصة إدارة محتوى ويب مفتوحة المصدر CMS في النظام البيئي لمايكروسوفت. قبل الإصدار 10.1.1، يسمح موفر محرر HTML الافتراضي بتحميل الملفات بدون مصادقة ويمكن للصور الكتابة فوق الملفات الموجودة. يمكن للمستخدم غير الموثّق تحميل واستبدال الملفات الموجودة مما يسمح...

CVE-2024-53677

CVE-2024-53677 إثبات المفهوم لاستغلال CVE-2024-53677 - ثغرة اجتياز المسار في رفع الملفات في Apache Struts مما يؤدي إلى تنفيذ تعليمات برمجية عن بعد...

Gitlab-CVE-2021-22205

ثغرة تنفيذ أكواد عن بُعد دون مصادقة على Gitlab الإصدار -c تم اختباره على الإصدار 13.10.1-ce.0...

CVE-2009-2265-fix

CVE-2009-2265 - Adobe ColdFusion RCE Exécution de code à distance non authentifiée via un téléversement de fichier arbitraire dans le composant FCKeditor intégré à ColdFusion. Le point de terminaison de téléversement de fichier accepte une injection d'octet nul dans le paramètre filename,...