CVE-2026-8065

The Hitachi Energy RTU500 contains an authentication bypass vulnerability in its firmware update endpoint . An unauthenticated attacker can exploit this by sending a crafted POST request to upload arbitrary firmware . Successful exploitation allows the attacker to modify device functionality or c...

EUVD-2026-88666

An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or...

CVE-2026-8065

An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or...

CVE-2026-8065

An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or...

CVE-2026-96431

Unrestricted Upload of File with Dangerous Type in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 version before 2023/03/24 allows remote authenticated users to execute arbitrary system commands via a malicious file...

CVE-2021-22205

CVE-2021-22205 - GitLab 인증되지 않은 원격 코드 실행 CVE-2021-22205 는 GitLab Community Edition CE 및 Enterprise Edition EE에 영향을 미치는 치명적인 원격 코드 실행RCE 취약점입니다. 이 취약점은 타사 유틸리티 ExifTool 이 처리하는 업로드된 이미지 파일의 부적절한 검증에서 비롯됩니다. 공격자는 악의적인 파일을 조작하여 GitLab 서버에서 임의 명령 실행을 유발할 수 있습니다. 이 취약점은 CVSS 점수 10.0 심각을 받았으며, 실제 환경에서...

CVE-2026-96431 Flowring Agentflow 4.0 - Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 version before 2023/03/24 allows remote authenticated users to execute arbitrary system commands via a malicious file...

CVE-2026-96431 Flowring Agentflow 4.0 - Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 version before 2023/03/24 allows remote authenticated users to execute arbitrary system commands via a malicious file...

EUVD-2026-88662

Unrestricted Upload of File with Dangerous Type in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 version before 2023/03/24 allows remote authenticated users to execute arbitrary system commands via a malicious file...

CVE-2026-96431

The Flowring Agentflow 4.0 software (versions before 2023/03/24 ) is vulnerable to an Unrestricted Upload of File with Dangerous Type via the /WebAgenda/download/uploadFile.jsp API endpoint. This flaw allows remote authenticated users with low privileges to execute arbitrary system commands by up...

CVE-2026-102290

A vulnerability was determined in CodeCanyon Rocket LMS up to 2.2. This affects an unknown function of the component Student Profile Image Upload. Executing a manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may be...

CVE-2026-102263

A vulnerability has been found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The affected element is an unknown function of the file manage-food.php. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to t...

CVE-2026-102290

A vulnerability exists in CodeCanyon Rocket LMS up to version 2.2 . The issue resides in an unknown function within the Student Profile Image Upload component, where specific manipulations can lead to Cross-Site Scripting (XSS) . This attack can be executed remotely , and the exploit has been pub...

EUVD-2026-88641

A vulnerability was determined in CodeCanyon Rocket LMS up to 2.2. This affects an unknown function of the component Student Profile Image Upload. Executing a manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may be...

CVE-2026-102290 CodeCanyon Rocket LMS Student Profile Image Upload cross site scripting

A vulnerability was determined in CodeCanyon Rocket LMS up to 2.2. This affects an unknown function of the component Student Profile Image Upload. Executing a manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may be...

CVE-2026-102290 CodeCanyon Rocket LMS Student Profile Image Upload cross site scripting

A vulnerability was determined in CodeCanyon Rocket LMS up to 2.2. This affects an unknown function of the component Student Profile Image Upload. Executing a manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may be...

CVE-2026-102263 mwasikz robo-cafe-rms manage-food.php unrestricted upload

A vulnerability has been found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The affected element is an unknown function of the file manage-food.php. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to t...

CVE-2026-102263 mwasikz robo-cafe-rms manage-food.php unrestricted upload

A vulnerability has been found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The affected element is an unknown function of the file manage-food.php. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to t...

CVE-2026-102263

A vulnerability exists in mwasikz robo-cafe-rms up to commit 228c44a02823f04e85db32b7137809a2856148fc . An unknown function within the manage-food.php file allows for unrestricted upload , which can be triggered remotely. While the exploit has been disclosed to the public and may be used, specifi...

EUVD-2026-88631

A vulnerability has been found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The affected element is an unknown function of the file manage-food.php. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to t...