PrestaShop < 1.7.6.6 - Information Exposure via Upload Directory

PrestaShop versions after 1.5.0.0 and before 1.7.6.6 are vulnerable to information exposure through directory listing in the upload directory due to a missing index.php file. id: CVE-2020-15081 info: name: PrestaShop 1.7.6.6 - Information Exposure via Upload Directory author: 0xAkoko severity: lo...

CVE-2015-6668

CVE-2015-6668 - IDOR в Job Manager Небольшой CLI-инструмент на Rust, воспроизводящий шаблон раскрытия информации, связанный с CVE-2015-6668 Job Manager //имяфайла.расш. Шаблон атаки: перебор / перечисление стандартных папок вида год/месяц и вариантов имён файлов для поиска доступных файлов...

CVE-2026-19264

CVE-2026-19264 — неаутентифицированный обход пути с полным захватом экземпляра Postiz Автор: Krithik Babu P @DarkLycn1976 Опубликовано: 2026-08-10 CVE: CVE-2026-19264 Серьёзность: Критическая — CVSS 4.0 9.3 / CVSS 3.1 9.8 CWE: CWE-22 — Некорректное ограничение пути в пределах ограниченного катало...

CVE-2023-2825-PoC

CVE-2023-2825-PoC Доказательство концепции для CVE-2023-2825 — уязвимости произвольного чтения файлов в GitLab CE/EE 16.0.0. Скрипт входит в систему с действительной учётной записью GitLab, создаёт необходимую структуру вложенных публичных групп, создаёт публичный проект, загружает вложение и...

CVE-2025-70559

Измените каталог загрузки в Python-скрипте python3 exploit.py LHOST LPORT...

CVE-2026-54567

Flask-Reuploaded versions from 1.5.0 to before 1.6.0 are affected by a case-folding asymmetry in the name-override path of UploadSet.save(). When a caller supplies a name override, the extension re-validation uses the case-preserving extension() helper instead of the case-normalizing lowercase_ex...

Exploit for CVE-2025-70559

python3...

GHSA-MMJ4-63M4-R6H5 CodeIgniter: Uploaded file extension validation bypass in `is_image` and `mime_in` rules

Impact This is an unsafe file upload validation vulnerability that can lead to remote code execution in vulnerable application configurations. Applications are impacted when they: - validate uploads using isimage or mimein without an independent safe extension check, such as extin on patched...

GHSA-HHMC-Q9HP-R662 CodeIgniter: Path traversal in UploadedFile::move() when using client-provided filenames

Impact In affected versions, calling UploadedFile::move without a second argument uses the client-provided filename without sanitization. Depending on the destination path and server configuration, an attacker can supply a filename containing path traversal sequences e.g. ../../public/shell.php t...

CVE-2026-16054 Drag and Drop Multiple File Upload for WooCommerce < 1.1.8 - Unauthenticated File Deletion via Nonce Oracle

The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.8 does not prevent unauthenticated users from obtaining a valid nonce that is the only control gating its file-deletion routine, allowing anonymous attackers to delete files staged in its upload directory and...

CVE-2026-16054

The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin, in versions prior to 1.1.8 , is vulnerable to unauthenticated file deletion. The root cause is a nonce oracle that allows unauthenticated users to obtain a valid nonce, which is the only control protecting the plugin's file-...

EUVD-2026-53722

The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.8 does not prevent unauthenticated users from obtaining a valid nonce that is the only control gating its file-deletion routine, allowing anonymous attackers to delete files staged in its upload directory and...

Tianwen-ERP-Upload-PoC

Tianwen Property ERP — Unauthenticated File Upload CVE: P...

Directory Traversal

Overview codeigniter4/framework is a PHP full-stack web framework that is light, fast, flexible, and secure. Affected versions of this package are vulnerable to Directory Traversal via the move function when handling client-supplied filenames. An attacker can write files outside the intended uplo...

CVE-2026-52680

Apache Kyuubi REST batch multipart upload handling uses the client-supplied multipart filename when creating a temporary uploaded resource. A remote attacker who can access the REST batch upload endpoint can provide path traversal sequences in the filename and cause the Kyuubi server process to...

CVE-2026-52680 Apache Kyuubi: REST batch multipart upload path traversal allows controlled file write

Apache Kyuubi REST batch multipart upload handling uses the client-supplied multipart filename when creating a temporary uploaded resource. A remote attacker who can access the REST batch upload endpoint can provide path traversal sequences in the filename and cause the Kyuubi server process to...

CVE-2026-52680

Apache Kyuubi versions 1.7.0 through 1.11.1 are vulnerable to a Path Traversal vulnerability (CWE-22, CWE-73) in the REST batch multipart upload handling. Specifically, the Utils.writeToTempFile function in kyuubi-common fails to normalize or contain the client-supplied filename during a POST /ap...

EUVD-2026-51185

Apache Kyuubi REST batch multipart upload handling uses the client-supplied multipart filename when creating a temporary uploaded resource. A remote attacker who can access the REST batch upload endpoint can provide path traversal sequences in the filename and cause the Kyuubi server process to...

CVE-2026-52680 Apache Kyuubi: REST batch multipart upload path traversal allows controlled file write

Apache Kyuubi REST batch multipart upload handling uses the client-supplied multipart filename when creating a temporary uploaded resource. A remote attacker who can access the REST batch upload endpoint can provide path traversal sequences in the filename and cause the Kyuubi server process to...

CVE-2026-15012 Demi <= 0.0.8 - Unauthenticated Information Exposure to Arbitrary Directory Copy

The Demi – One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory Copy in all versions up to, and including, 0.0.8 via the handlerestorestep function. This is due to missing HTTP access controls on the wp-content/uploads/demi-backup-state/...