CVE-2025-57462

CVE-2025-57462 الوصف: ثغرة برمجة نصية مخزنة عبر الموقع Stored XSS عن طريق رفع ملف ضار في machpanel 8.0.32. دليل الإثبات POC: انتقل إلى https://controlpaneldomain/Client/SubmitTicket.aspx وارفَع ملف PDF يحتوي على نصوص XSS ضارة في البيانات الوصفية metadata، بعد إرسال التذكرة يمكنك تنفيذ النص الضار ...

CVE-2025-57298

تخزين XSS عبر عرض Markdown غير آمن في Kotaemon ملخص Kotaemon هو نظام أسئلة وأجوبة مفتوح المصدر يعتمد على RAG التوليد المعزز بالاسترجاع ويوفر واجهة ويب للاستعلام عن المستندات المرفوعة مثل ملفات PDF وWord وExcel. توجد ثغرة تخزين للبرمجة النصية عبر المواقع XSS في مسار عرض المستندات في Kotaemon. يتم...

CVE-2026-19386

A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload that exceeds the expected buffer size.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for...

Chamilo LMS <= 1.11.24 - Remote Code Execution

Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS = v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell. id: CVE-2023-422...

SPIP BigUp Plugin - Remote Code Execution

SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request. id: CVE-2024-8517 info: name: SPIP BigUp Plugin - Remote Code Execution...

DELMIA Apriso - Command Injection

An Improper Control of Generation of Code code injection / file upload → RCE vulnerability affecting DELMIA Apriso Release 2020 → Release 2025. When an authenticated user can upload files and the upload handler fails to canonicalize filenames or enforce storage restrictions, an attacker may place...

Cisco HyperFlex HX Data Platform - Arbitrary File Upload

Cisco HyperFlex HX Data Platform contains an arbitrary file upload vulnerability in the web-based management interface. An attacker can send a specific HTTP request to an affected device, thus enabling upload of files to the affected device with the permissions of the tomcat8 user. id:...

DotCMS - Arbitrary File Upload

DotCMS management system contains an arbitrary file upload vulnerability via the /api/content/ path which can allow attackers to upload malicious Trojans to obtain server permissions. id: CVE-2022-26352 info: name: DotCMS - Arbitrary File Upload author: h1ei1 severity: critical description: DotCM...

Roxy Fileman 1.4.5 - Unrestricted File Upload

Roxy Fileman 1.4.5 is susceptible to unrestricted file upload via upload.php. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. id: CVE-2018-20526 info: name: Roxy Fileman 1.4.5 -...

Zimbra Collaboration - Unrestricted File Upload

An issue was discovered in Zimbra Collaboration ZCS 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole extraction to /opt/zimbra/jetty/webapps/zimbra/public that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also,...

EUVD-2026-94157

A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload that exceeds the expected buffer size.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for...

CVE-2026-19386

A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload that exceeds the expected buffer size.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for...

CVE-2026-19386

A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload that exceeds the expected buffer size.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for...

CVE-2026-19386

A stack-based buffer overflow exists in ASUS router modules , which allows an authenticated nearby user to execute arbitrary code . This vulnerability is triggered by uploading a crafted configuration file that exceeds the expected buffer size. For specific details on affected versions and remedi...

CVE-2019-12889

CVE-2019-12889 ملخص يوجد تصعيد امتيازات غير مصادق عليه في أداة SailPoint Desktop Password Reset 7.2. يمكن للمستخدم الذي لديه وصول محلي إلى شاشة تسجيل الدخول في نظام Windows فقط أن يرفع امتيازاته إلى NT AUTHORITY\System. سيحتاج المهاجم إلى وصول محلي إلى الجهاز من أجل استغلال ناجح. يجب على المهاجم...

CVE-2026-12793

CVE-2026-12793 — JetFormBuilder ≤ 3.6.2 Escalade de privilèges non authentifiée → téléversement de plugin → RCE. Versions affectées Vulnérable : = 3.6.3 Utilisation rapide Vérifier une cible unique python poc.py -u https://target.example --mode check Exploit complet nécessite un compte à faibles...

CVE-2025-3616

وحدة Metasploit: تحميل ملف عشوائي في إضافة Greenshift لووردبريس CVE-2025-3616 يحتوي هذا المستودع على وحدة Metasploit لاستغلال CVE-2025-3616 ، وهي ثغرة تحميل ملف عشوائي في إضافة Greenshift لووردبريس الإصدارات 11.4 حتى 11.4.5. تسمح هذه الثغرة للمستخدمين الموثقين مشترك فما فوق بتحميل ملفات عشوائية...

CVE-2025-52691

CVE-2025-52691 SmarterMail: رفع ملفات تعسفي غير مصادق يؤدي إلى تنفيذ تعليمات برمجية عن بُعد RCE نظرة عامة ثغرة حرجة لرفع ملفات تعسفي غير مصادق تسمح بتنفيذ تعليمات برمجية عن بُعد. الحقل| القيمة ---|--- المنتج| SmarterMail الإصدارات المتأثرة| الإصدار 9406 وما قبله CVSS| 10.0 حرجة النوع| رفع ملفات...

PT-2026-107382

Name of the Vulnerable Software and Affected Versions ASUS router affected versions not specified Description A stack-based buffer overflow occurs in the router modules. This issue allows an authenticated nearby user to execute arbitrary code by uploading a crafted configuration file that exceeds...

PT-2026-107479

Unrestricted file upload vulnerability in the BugTracker.NET attachment functionality. An authenticated user with administrator privileges could modify the application configuration to store files in a directory accessible via the web interface. Due to the lack of proper file extension validation...