86263 matches found
Bludit CMS 3.22.0 Cross Site Scripting
Bludit CMS version 3.22.0 suffers from an SVG related cross site scripting vulnerability. Exploit Title: Bludit CMS - Stored XSS Date: 2026-07-30 Exploit Author: Saud Alenazi Vendor Homepage: https://www.bludit.com Software Link: https://github.com/bludit/bludit/releases/tag/3.22.0 Version: 3.22....
PT-2026-84219
Name of the Vulnerable Software and Affected Versions Gravity Forms versions prior to 3.0.3 Description An arbitrary file upload issue exists affecting over 1 million WordPress installations. The flaw originates from insufficient validation of the multi-file upload chunk state within the...
PT-2026-84361
An eval injection vulnerability in the get list function in modules/meta parser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...
PT-2026-84531
Name of the Vulnerable Software and Affected Versions GitHub Enterprise Server versions prior to 3.22 Description A time-of-check time-of-use TOCTOU race condition—a scenario where a system checks the state of a resource before using it, but the state changes between the check and the use—allows...
CVE-2026-19118: Time-of-check Time-of-use (TOCTOU) Race Condition
A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution. Exploitation required an authenticated user with write access to a repository and precise timing of concurrent upload requests. This vulnerability affected all...
CVE-2026-19513: Unrestricted Upload of File with Dangerous Type
The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.0.2. This is due to insufficient validation of multi-file upload chunk state in the GFAsyncUpload::upload function, where public form state URL hashes can be reused as chunk...
CVE-2026-84637: Unrestricted Upload of File with Dangerous Type
Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird's normal executable attachment protections. With the new invitation display enabled, the attachment could also appear under a misleading filename. This...
CVE-2026-75921: Incorrect Authorization
The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.9 via the uploadtemplatekit function. This is due to incorrect...
PT-2026-84075
Name of the Vulnerable Software and Affected Versions WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode versions prior to 4.4.2 Description An arbitrary file upload issue exists due to missing file type validation in the saas upload logo function combin...
PT-2026-84534
Name of the Vulnerable Software and Affected Versions Casdoor versions prior to 4.0.0 Description An issue exists in the upload-resource API within the controllers/resource.go file. This flaw allows remote attackers to bypass authentication, leading to missing authentication for the affected...
PT-2026-84109
The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.9 via the upload template kit function. This is due to incorrect...
CVE-2026-84423: Missing Authentication for Critical Function
A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the file controllers/resource.go of the component upload-resource API. Such manipulation leads to missing authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the...
CVE-2026-75865: Unrestricted Upload of File with Dangerous Type
The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the saasuploadlogo function combined with an authorization bypass on the WPLP connector REST endpoin...
CVE-2026-84147: Unrestricted Upload of File with Dangerous Type
This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by uploading arbitrary files to a web accessible directory on the targeted system...
CVE-2026-51974
An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...
Bludit CMS - Stored XSS
Exploit Title: Bludit CMS - Stored XSS Date: 2026-07-30 Exploit Author: Saud Alenazi Vendor Homepage: https://www.bludit.com Software Link: https://github.com/bludit/bludit/releases/tag/3.22.0 Version: 3.22.0 Tested on: Windows 10 x64 Description: sanitizeSVG strips script/on but does not remove...
CVE-2026-82921
A weakness has been identified in ShopEx ECShop up to 2.5.1. This affects the function checkimgtype of the file admin/pack.php. Executing a manipulation of the argument packimg can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been made available to th...
CVE-2026-82396
Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, src/Sulu/Bundle/MediaBundle/Controller/MediaStreamController.php allows the /media/id/download/slug route and its administration variant to honor the inline query parameter for...
GHSA-67MX-6WF2-92XP Kirby: File upload permissions are not checked during processing of chunk data
TL;DR This vulnerability affects all Kirby sites where users of a particular role have access to the REST API access.panel permission is enabled but no permission to upload any kind of file files.create, files.replace and user/users.update permissions are all disabled. It was possible to fill up...
Kirby: File upload permissions are not checked during processing of chunk data
TL;DR This vulnerability affects all Kirby sites where users of a particular role have access to the REST API access.panel permission is enabled but no permission to upload any kind of file files.create, files.replace and user/users.update permissions are all disabled. It was possible to fill up...