3417 matches found
Melis Technology Melis Platform - Unrestricted File Upload & Remote Code Execution
Melis Technology Melis Platform contains an unrestricted file upload caused by insufficient validation of 'mcsdetailimg' parameter in /melis/MelisCmsSlider/MelisCmsSliderDetails/saveDetailsForm, letting attackers upload malicious files and achieve remote code execution, exploit requires crafted...
WP Mobile Detector <= 3.5 - Unrestricted File Upload
WP Mobile Detector plugin for WordPress = 3.5 contains an unrestricted file upload vulnerability caused by missing file type validation in resize.php, letting unauthenticated attackers upload arbitrary files, potentially leading to remote code execution. id: CVE-2016-15043 info: name: WP Mobile...
MikoPBX - Unrestricted File Upload
MikoPBX through 2024.1.114 contains an authenticated unrestricted file upload vulnerability caused by allowing PHP script uploads in PBXCoreREST/Controllers/Files/PostController.php. id: CVE-2025-52207 info: name: MikoPBX - Unrestricted File Upload author: darses severity: critical description: |...
monitorr-exploit-toolkit
Набор эксплойтов для Monitorr RCE через небезопасную загрузку файлов PHP reverse shell, webshell и т. д. Создание учётной записи администратора через обход авторизации Утечка технической информации : версия Monitorr, версия PHP, версия системы и ядра, конфигурация PHP и т. д. Эксплойт для...
CVE-2025-4389
CVE-2025-4389 Эксплойт Детали Опубликовано : 16 мая 2025 г. Обновлено : 17 мая 2025 г. Критичность : Критический оценка CVSS: 9.8 CWE : CWE-434: CWE-434 Неограниченная загрузка файла опасного типа Затронутые версии : Все версии от n/a до 2.6.8.1 Исследователь :...
CVE-2026-50894
easyadmin v2.0.2.2 contains an Unrestricted Upload of File with Dangerous Type vulnerability in its background management interface . An authenticated remote attacker can exploit this by uploading a crafted file, leading to arbitrary code execution and potential server privilege escalation . No s...
EUVD-2026-71772
easyadmin v2.0.2.2 is vulnerable to Unrestricted Upload of File with Dangerous Type in the background management interface which allows authenticated remote attackers to execute arbitrary code and gain server privileges via a crafted file upload...
CVE-2024-44849
CVE-2024-44849 Auteur : Extencil [email protected] CVE-2024-44849 est une vulnérabilité critique d'exécution de code à distance RCE qui impacte toutes les versions antérieures jusqu'à Qualitor 8.24. Site Web Qualitor L'utilisation de ce programme pour attaquer ou compromettre une entreprise ...
CVE-2026-85208
A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. The affected element is the function doInsert of the file /rider/orders/controller.php?action=add of the component Order Management Controller. Performing a manipulation of the argument image results in...
CVE-2021-40870
CVE-2021-40870 Неограниченная загрузка файла с опасным типом в Aviatrix позволяет аутентифицированному пользователю выполнить произвольный код...
EUVD-2026-70732
A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. The affected element is the function doInsert of the file /rider/orders/controller.php?action=add of the component Order Management Controller. Performing a manipulation of the argument image results in...
CVE-2026-85208 itsourcecode Online Medicine Delivery System Order Management Controller controller.php doInsert unrestricted upload
A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. The affected element is the function doInsert of the file /rider/orders/controller.php?action=add of the component Order Management Controller. Performing a manipulation of the argument image results in...
Unrestricted-File-Upload-on-SiteMagic-CMS-4.4.2
Неограниченная загрузка файлов в SiteMagic CMS 4.4.2 В этом репозитории описано, как использовать уязвимость неограниченной загрузки файлов в SiteMagic CMS 4.4.2 О SiteMagic CMS 4.4.2 Веб-сайт: https://sitemagic.org/ Скачать: https://sitemagic.org/Download.html PoC — Эксплуатация уязвимости...
CVE-2026-85186
itsourcecode Online Medicine Delivery System 1.0 is affected by an unrestricted file upload vulnerability in the Customer Controller component, specifically the doupdateimage function in /customer/controller.php?action=photos. An attacker can manipulate the photo argument to upload arbitrary file...
EUVD-2026-70555
A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is the function doupdateimage of the file /customer/controller.php?action=photos of the component Customer Controller. Executing a manipulation of the argument photo can lead to...
CVE-2026-85186 itsourcecode Online Medicine Delivery System Customer Controller controller.php doupdateimage unrestricted upload
A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is the function doupdateimage of the file /customer/controller.php?action=photos of the component Customer Controller. Executing a manipulation of the argument photo can lead to...
CVE-2026-76174
Unrestricted file upload vulnerability in the CSV file upload functionality of the Ocsreports admininfo endpoint. The application validates files solely based on the name provided by the client, without properly checking their content or securely restricting the permitted file types. This allows ...
CVE-2026-76174
Ocsreports for OCS Inventory NG has an unrestricted file upload vulnerability in the CSV file upload functionality of the admin_info endpoint . The application validates files solely by the client-provided name, without inspecting content or restricting permitted file types. An administrator user...
EUVD-2026-70368
Unrestricted file upload vulnerability in the CSV file upload functionality of the Ocsreports admininfo endpoint. The application validates files solely based on the name provided by the client, without properly checking their content or securely restricting the permitted file types. This allows ...