CVE-2026-84147: Unrestricted Upload of File with Dangerous Type

This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by uploading arbitrary files to a web accessible directory on the targeted system...

CVE-2026-75921: Incorrect Authorization

The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.9 via the uploadtemplatekit function. This is due to incorrect...

CVE-2026-19118: Time-of-check Time-of-use (TOCTOU) Race Condition

A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution. Exploitation required an authenticated user with write access to a repository and precise timing of concurrent upload requests. This vulnerability affected all...

CVE-2026-84423: Missing Authentication for Critical Function

A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the file controllers/resource.go of the component upload-resource API. Such manipulation leads to missing authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2026-84637: Unrestricted Upload of File with Dangerous Type

Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird's normal executable attachment protections. With the new invitation display enabled, the attachment could also appear under a misleading filename. This...

CVE-2026-75865: Unrestricted Upload of File with Dangerous Type

The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the saasuploadlogo function combined with an authorization bypass on the WPLP connector REST endpoin...

Bludit CMS - Stored XSS

Exploit Title: Bludit CMS - Stored XSS Date: 2026-07-30 Exploit Author: Saud Alenazi Vendor Homepage: https://www.bludit.com Software Link: https://github.com/bludit/bludit/releases/tag/3.22.0 Version: 3.22.0 Tested on: Windows 10 x64 Description: sanitizeSVG strips script/on but does not remove...

PT-2026-84075

Name of the Vulnerable Software and Affected Versions WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode versions prior to 4.4.2 Description An arbitrary file upload issue exists due to missing file type validation in the saas upload logo function combin...

PT-2026-84361

An eval injection vulnerability in the get list function in modules/meta parser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...

PT-2026-84109

The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.9 via the upload template kit function. This is due to incorrect...

PT-2026-84199

Name of the Vulnerable Software and Affected Versions Manacle Technologies ERP affected versions not specified Description Improper authentication controls and inadequate file type validation at the API endpoint allow an unauthenticated remote attacker to upload arbitrary files to a web accessibl...

PT-2026-84219

Name of the Vulnerable Software and Affected Versions Gravity Forms versions prior to 3.0.3 Description An arbitrary file upload issue exists affecting over 1 million WordPress installations. The flaw originates from insufficient validation of the multi-file upload chunk state within the...

EUVD-2026-69416

An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...

PT-2026-84531

Name of the Vulnerable Software and Affected Versions GitHub Enterprise Server versions prior to 3.22 Description A time-of-check time-of-use TOCTOU race condition—a scenario where a system checks the state of a resource before using it, but the state changes between the check and the use—allows...

Bludit CMS 3.22.0 Cross Site Scripting

Bludit CMS version 3.22.0 suffers from an SVG related cross site scripting vulnerability. Exploit Title: Bludit CMS - Stored XSS Date: 2026-07-30 Exploit Author: Saud Alenazi Vendor Homepage: https://www.bludit.com Software Link: https://github.com/bludit/bludit/releases/tag/3.22.0 Version: 3.22....

CVE-2026-82921

A weakness has been identified in ShopEx ECShop up to 2.5.1. This affects the function checkimgtype of the file admin/pack.php. Executing a manipulation of the argument packimg can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been made available to th...

CVE-2026-82396

Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, src/Sulu/Bundle/MediaBundle/Controller/MediaStreamController.php allows the /media/id/download/slug route and its administration variant to honor the inline query parameter for...

GHSA-67MX-6WF2-92XP Kirby: File upload permissions are not checked during processing of chunk data

TL;DR This vulnerability affects all Kirby sites where users of a particular role have access to the REST API access.panel permission is enabled but no permission to upload any kind of file files.create, files.replace and user/users.update permissions are all disabled. It was possible to fill up...

Kirby: File upload permissions are not checked during processing of chunk data

TL;DR This vulnerability affects all Kirby sites where users of a particular role have access to the REST API access.panel permission is enabled but no permission to upload any kind of file files.create, files.replace and user/users.update permissions are all disabled. It was possible to fill up...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the chunk upload handler process. An attacker can consume excessive server storage by uploading multiple large incomplete file chunks without proper permissions, potentially leading to denial of service for...