CVE-2023-43040

CVE-2023-43040 Этот репозиторий содержит proof-of-concept эксплойт для уязвимости CVE-2023-43040, найденной в RADOS Gateway RADOSGW. Данная уязвимость позволяет злоумышленникам загружать объекты в любые корзины, доступные с помощью указанного ключа доступа, что потенциально может привести к...

CVE-2025-67887

🛡️ Correctif pour la « vulnérabilité » CVE-2025-67887/86 dans le module Translate de 1C-Bitrix Sécurité 1C-Bitrix Le Centre de sécurité de l'information et de surveillance des incidents de « 1C-Bitrix » informe Des informations sont apparues sur des chaînes Telegram concernant une vulnérabilité...

phpweb

phpweb upload arbitraire de fichiers en frontend...

CVE-2021-21972

Utilisation : CVE-2021-21972.py option -u ou --url : URL cible -t ou --type : Type de payload ssh/webshell -f ou --file : Fichier à téléverser webshell ou authorizedkeys Exemple : CVE-2021-21972.py -u https://127.0.0.1 -t webshell -f shell.jsp -p ou --proxy : Définir un proxy Exemple :...

CVE-2021-22210

0x01 Introduction Déclaration : ce projet est réservé à l'apprentissage et aux échanges. Ne l'utilisez pas pour des tests illégaux ou non autorisés ! Journal des mises à jour 10.30 Ajout du pool de proxys burp Réécriture des arguments de la ligne de commande Ajout de la détection non autorisée en...

CVE-2024-10578

CVE-2024-10578: Pubnews = 1.0.7 - Installation non authentifiée de plugins arbitraires Description Le thème Pubnews pour WordPress est vulnérable à l'installation non autorisée de plugins arbitraires en raison d'un manque de vérification des capacités dans la fonction...

CVE-2025-31324

CVE-2025-31324 Une preuve de concept développée pour exploiter CVE-2025-31324. Utilisation usage: python CVE-2025-31324.py --help SAP NetWeaver Visual Composer Metadata Uploader = 7.50 CVE-2025-31324 PoC positional arguments: FILE local file to upload optional arguments: -h, --help show this help...

Vulnerabilities in GeoNetwork are addressed through OpenGeo

OpenGeo has identified several vulnerabilities in GeoNetwork, a open-source cataloging application, specifically in versions 4.4.5 through 4.4.11, as well as versions preceding 4.4.12 and 4.2.17. The first vulnerability involves a reflected cross-site scripting XSS attack in the public,...

CVE-2026-32639

Winter CMS (a content management system built on Laravel) contained a broken access control flaw in its CMS Theme Editor AJAX handlers (Cms\Controllers\Index). The controller used OR-logic across five permissions to gate section access, but individual handlers like onSave(), onDelete(), and onDel...

CVE-2026-72859

Budibase 3.39.4 before 3.40.0 contains an authorization regression in the S3 attachment upload endpoint. Affected component: the attachments endpoint used to generate S3 PutObject presigned URLs. Root cause: the route was changed from a BUILDER permission check to a TABLE/WRITE check, which BASIC...

CVE-2026-72859 Budibase 3.39.4 before 3.40.0 Authorization Regression via S3 Presigned URL

Budibase versions 3.39.4 before 3.40.0 contain an authorization regression in the S3 attachment upload endpoint that allows BASIC users to obtain S3 PutObject presigned URLs by sending POST requests to the attachments endpoint. The route was changed from a BUILDER permission check to a TABLE/WRIT...

Winter: Broken access control in `Cms\Controllers\Index` allows cross-template actions and unauthorized asset uploads

Impact Affected versions of Winter CMS did not enforce per-template-type permission checks in the CMS section's AJAX handlers. The CMS controller Cms\Controllers\Index used OR-logic across its five permissions cms.managepages, cms.managepartials, cms.managelayouts, cms.managecontent,...

CVE-2026-18962

The WP Photo Album Plus WordPress plugin before 9.2.09.002 does not check that the current user is allowed to upload into the album they target when it processes a front-end upload, allowing any authenticated user, such as a Subscriber, to upload files into albums owned by other users or by the...

PT-2026-71029

The WP Photo Album Plus WordPress plugin before 9.2.09.002 does not check that the current user is allowed to upload into the album they target when it processes a front-end upload, allowing any authenticated user, such as a Subscriber, to upload files into albums owned by other users or by the...

PT-2026-75930

Impact Affected versions of Winter CMS did not enforce per-template-type permission checks in the CMS section's AJAX handlers. The CMS controller CmsControllersIndex used OR-logic across its five permissions cms.manage pages, cms.manage partials, cms.manage layouts, cms.manage content, cms.manage...

CVE-2026-13743

CubeSpace CW0057 Reaction Wheel firmware versions prior to 5.0.20 are vulnerable to an Improper Verification of Cryptographic Signature vulnerability. This could allow an attacker with physical access to the product to upload arbitrary malicious firmware to the device without authentication...

GHSA-WVHV-QCQF-F3CX goshs has a file-based ACL authorization bypass in goshs state-changing routes

Summary goshs enforces the documented per-folder .goshs ACL/basic-auth mechanism for directory listings and file reads, but it does not enforce the same authorization checks for state-changing routes. An unauthenticated attacker can upload files with PUT, upload files with multipart POST /upload,...

CVE-2025-14944 Backup Migration <= 2.0.0 - Missing Authorization to Unauthenticated Backup Upload to Offline Storage

The Backup Migration plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.0.0. This is due to a missing capability check on the 'initializeOfflineAjax' function and lack of proper nonce verification. The endpoint only validates against hardcoded toke...

AVideo: Video Publishing Workflow Bypass via Unauthorized overrideStatus Request Parameter

Summary AVideo's video processing pipeline accepts an overrideStatus request parameter that allows any uploader to set a video's status to any valid state, including "active" a. This bypasses the admin-controlled moderation and draft workflows. The setStatus method validates the status code again...

CVE-2026-3533

The Jupiter X Core plugin for WordPress is vulnerable to limited file uploads due to missing authorization on importpopuptemplates function as well as insufficient file type validation in the uploadfiles function in all versions up to, and including, 4.14.1. This makes it possible for Authenticat...