CVE-2026-95499 JosephChuks php-file-manager-with-code-editor filemanager.php move_uploaded_file unrestricted upload

A flaw has been found in JosephChuks php-file-manager-with-code-editor up to 3.0. This issue affects the function moveuploadedfile of the file filemanager.php. Executing a manipulation of the argument files can lead to unrestricted upload. The attack can be executed remotely. The vendor was...

CVE-2026-93616

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server...

CVE-2026-93616 Directory Traversal and File upload allows execution of arbitrary script on the Management Server

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server...

CVE-2026-93616 Directory Traversal and File upload allows execution of arbitrary script on the Management Server

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server...

EUVD-2026-84375

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server...

CVE-2026-93616

A pre-authentication directory traversal vulnerability exists in the Check Point Management Web Service , affecting Check Point Security Management and Log Servers. This flaw allows unauthenticated attackers to upload and execute arbitrary scripts, potentially leading to remote code execution . A...

WordPress Photo Gallery, Sliders, Proofing and Themes plugin < 4.5.0 - Authenticated Arbitrary File Upload vulnerability

Authenticated Arbitrary File Upload vulnerability discovered by Alihan Şahin in WordPress Plugin NextGEN Gallery versions 4.5.0...

Researchers used Claude to hack OpenAI

We’ve heard of OpenAI’s AI agents running amok and hacking other companies. Now, a cybersecurity company has turned the tables on the ChatGPT operator by using AI to help hack OpenAI itself. The hack, which also exposed a bug affecting dozens of other major online services, was conducted as...

WordPress Web to Print Online Designer plugin < 2.15.0 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Mike Gozdiskowski in WordPress Plugin Web to Print Online Designer versions 2.15.0...

Web-App-PenTesting

--- 🚀 Quick Start 1. Clone the repository bash git c...

EUVD-2026-84184

Jazzware RT1000 Edge webUI v. 20.0.1 contains an unrestricted file upload vulnerability in the upgrade package upload functionality. An authenticated attacker can upload a server-side executable file. The uploaded file is stored in a web-accessible executable location and can be accessed directly...

CVE-2026-77246: Improper Limitation of a Pathname to a Restricted Directory

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, an HTTP transport deployment with READONLYMODE=false accepts a request without an Authorization identity and permits attacker-controlled Atlassian service headers, including...

PT-2026-96954

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description The confluence upload attachment and confluence upload attachments tools do not validate that the provided source path is confined to an allowed directory before opening the file. A caller can...

PT-2026-96928

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description An arbitrary local file read issue exists in the Confluence and Jira upload attachment tool paths. The implementation accepts an unconstrained file path and opens the referenced server-local...

PT-2026-96949

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description HTTP-exposed Jira and Confluence upload tools allow a remote caller to provide a file path that is passed to local file operations without being restricted to a specific workspace. This allows...

PT-2026-96901

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description The upload attachment function in src/mcp atlassian/confluence/attachments.py fails to call validate safe path, allowing it to accept a caller-controlled file path and open server-local files...

PT-2026-96903

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description The Jira and Confluence attachment upload tools fail to validate file paths, allowing for path traversal. An authenticated MCP client or an AI assistant manipulated via prompt injection can...

CVE-2026-77262: Improper Limitation of a Pathname to a Restricted Directory

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, confluenceuploadattachment accepts an attacker-controlled filepath and does not apply the path restriction added for the earlier download vulnerability. A caller can traverse outside...

PT-2026-96942

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description Jira and Confluence upload tools interpret caller-controlled path arguments on the MCP server and open those files before sending them as attachments. This allows a permitted client to disclos...

PT-2026-96945

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description Jira and Confluence attachment upload tools accept arbitrary local filesystem paths and send the selected bytes to Atlassian. In HTTP or multi-user deployments, a caller can cross the...