PT-2026-83992

Name of the Vulnerable Software and Affected Versions Wallos versions prior to 4.9.6 Description An issue exists where the application fails to validate entry names for directory traversal sequences when processing zip files. An administrator can upload a specially crafted zip archive to the 'POS...

CVE-2026-81780: Unrestricted Upload of File with Dangerous Type

Unauthenticated Arbitrary File Upload in Hash Form = 1.4.2 versions...

CVE-2026-51728

Incorrect access control in the UploadFirmwareFile function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to upload a crafted firmware image via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-84020

Name of the Vulnerable Software and Affected Versions elFinder versions prior to 2.1.70 Description URL uploads in php/elFinder.class.php can bypass server-side request forgery SSRF protections when PHP cURL is unavailable. The validate address function validates the IP address, but get remote...

PT-2026-83995

Kirby is an open-source content management system. From 5.0.0 until 5.5.2, Kirby's REST API chunk upload handler in src/Api/Upload.php did not run the relevant upload authorization preflight in KirbyApiUpload::process before KirbyApiUpload::processChunk persisted chunk data. An authenticated user...

PT-2026-84018

Name of the Vulnerable Software and Affected Versions Hash Form versions 1.4.2 and earlier Description An unauthenticated arbitrary file upload issue exists, allowing an attacker to upload files, such as a web shell, without requiring authentication. Recommendations Update Hash Form to a version...

PT-2026-83851

Name of the Vulnerable Software and Affected Versions WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions prior to 4.4.2 Description An unauthenticated file upload flaw allows the unrestricted upload of files with dangerous types, which could enable the use of malicious files on the syste...

PT-2026-83778

Name of the Vulnerable Software and Affected Versions diem-project diem versions prior to 5.1.4 Description A flaw in the Widget Editor component allows for unrestricted upload of files. This issue occurs within an unknown function located in the file...

PT-2026-83715

A vulnerability was determined in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd. This issue affects the function MyJwWebJwid3Controller.doUpload of the file jeewx-boot-module-weixin/src/main/java/com/jeecg/p3/open/web/back/MyJwWebJwid3Controller.java of the component doUploa...

Linux Distros Unpatched Vulnerability : CVE-2026-5038

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Impact: multer versions 2.0.0-alpha.1 through 2.1.1 and 3.0.0-alpha.1 are vulnerable to a Denial of Service when using diskStorage. Aborted or malformed multipa...

PT-2026-83787

Name of the Vulnerable Software and Affected Versions Apache Wicket versions 8.0.0 through 8.18.0 Apache Wicket versions 9.0.0 through 9.23.0 Apache Wicket versions 10.0.0 through 10.10.0 Description An issue exists when parsing multipart requests where the request body has already been consumed ...

Langflow 1.8.4 Path Traversal / Remote Code Execution

Langflow versions 1.8.4 and below path traversal to remote code execution proof of concept exploit. Exploit Title: Langflow 1.8.4 - Path Traversal to Remote Code Execution Google Dork: N/A Date: 2026-07-20 Exploit Author: cardosource Vendor Homepage: https://www.langflow.org/ Software Link:...

PT-2026-83647

A vulnerability was identified in SeaCMS up to 13.6. Affected by this vulnerability is the function unlink of the file /member.php?action=chgpwdsubmit of the component Avatar Upload. Such manipulation of the argument oldpic leads to path traversal. It is possible to launch the attack remotely. Th...

CVE-2026-79743: Improper Limitation of a Pathname to a Restricted Directory

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 0.12.13, MCPB File Upload Handler extracts a ZIP file and reads manifest.json from it. The name field in the manifest i...

CVE-2026-81891: Unrestricted Upload of File with Dangerous Type

elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, checkExtractItems in php/elFinderVolumeDriver.class.php calls mimetypeInternalDetect without passing the result through mimeTypeNormalize. Because the .phtml, .phar, .php5, and .php3 extension...

PT-2026-83683

Improper Limitation of a Pathname to a Restricted Directory Path Traversal vulnerability in ash-project ash admin allows writing attacker-controlled bytes to arbitrary paths on the server. AshAdmin.Components.Resource.Form.consume file uploads/1 builds the destination as Path.jointmp dir,...

Langflow 1.8.4 - Path Traversal to Remote Code Execution

Exploit Title: Langflow 1.8.4 - Path Traversal to Remote Code Execution Google Dork: N/A Date: 2026-07-20 Exploit Author: cardosource Vendor Homepage: https://www.langflow.org/ Software Link: https://github.com/langflow-ai/langflow Version: Dictstr, Any: return "target": target.rstrip'/', "lhost"...

SUSE CVE-2026-33691

The OWASP core rule set CRS is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.9 and 4.25.0, a bypass was identified in OWASP CRS that allows uploading files with dangerous extensions .php, .phar, .jsp, .jspx by inserting whitespace...

Exploit for CVE-2026-1357

CVE-2026-1357 Unauthenticated Arbitrary File Upload → Remote...

CVE-2026-82472

Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without requiring authentication, session tokens, or API credentials. Unauthenticated attackers can upload arbitrary PDF files indefinitely to exhaust storage resources or fill the database with unlinked docume...