86457 matches found
CVE-2026-32474: Unrestricted Upload of File with Dangerous Type
Contributor Arbitrary File Upload in Templatiq = 0.2.5 versions...
PT-2026-80301
Summary Repo under test: https://github.com/Netflix/lemur PUT /api/1/certificates//revoke authorizes the caller against the Lemur database row creator == current user, or CertificatePermission over the row's roles rather than the underlying CA-side certificate identity. Separately, POST...
PT-2026-77033
Unauthenticated Arbitrary File Upload in Piotnet Addons For Elementor Pro = 7.1.67 versions...
PT-2026-80365
Pterodactyl's improper JWT scoping allows subuser to upload files when not explicitly granted file.create permissions in github.com/pterodactyl/wings...
EUVD-2026-61092
An arbitrary file write/directory traversal vulnerability in reportico-web = 8.1.0 allows remote attackers to create or overwrite files anywhere on the filesystem subject to the permissions of the web user by specifying a filename in the "saveTemplate" parameter in conjuction with...
PT-2026-77041
Contributor Arbitrary File Upload in Sync Post With Other Site = 1.9.3 versions...
PT-2026-77313
Name of the Vulnerable Software and Affected Versions Blueprint Studio versions prior to 2.5.2 Description Blueprint Studio fails to consistently enforce the admin-only authorization boundary on its backend, allowing any authenticated Home Assistant user to access actions intended for...
CVE-2026-66627: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in EDGE22 Studios Ltd. GP Premium allows Remote Code Inclusion. This issue affects GP Premium: from n/a through 2.5.5...
PT-2026-80270
Summary The SSRF mitigation added for GHSA-54vg-pfh7-jq95 validate revocation url in lemur /certificates/verify.py can be bypassed. An operator-role user who uploads a certificate with attacker-controlled CRL/OCSP extensions can still make Lemur reach internal destinations RFC1918, loopback,...
PT-2026-76917
SiYuan before v3.7.4 contains a cross-site scripting vulnerability in the file upload validation flow that fails to escape filenames before inserting them into HTML via insertAdjacentHTML. Attackers can craft a malicious filename containing script payloads that execute with full OS command access...
PT-2026-77246
Name of the Vulnerable Software and Affected Versions MobSF versions prior to 4.5.1 Description An authenticated user can upload a crafted APK to trigger requests to an attacker-selected nonstandard port at /.well-known/assetlinks.json. This occurs because the get browsable activities function in...
PT-2026-77050
Name of the Vulnerable Software and Affected Versions Templatiq versions prior to 0.2.6 Description An issue allows contributors to perform arbitrary file uploads, which could lead to the upload of unauthorized files to the system. Recommendations Update to a version newer than 0.2.5...
PT-2026-77245
Name of the Vulnerable Software and Affected Versions MobSF versions prior to 4.5.1 Description The unzip function in mobsf/StaticAnalyzer/views/common/shared func.py fails to properly handle archive members that exceed the ZIP MAX UNCOMPRESSED FILE SIZE limit. While the system logs that the...
PT-2026-76911
Name of the Vulnerable Software and Affected Versions OpenBoxes versions prior to 0.9.2 Description An unrestricted upload issue exists within the Document Upload Controller component. A remote attacker can exploit the DocumentController function located in the...
PT-2026-80395
Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability in github.com/apache/answer...
PT-2026-77059
Contributor Arbitrary File Upload in GP Premium = 2.5.5 versions...
PT-2026-77200
Name of the Vulnerable Software and Affected Versions Joomla! Core versions 1.0.0 through 5.4.7 Joomla! Core versions 6.0.0 through 6.1.2 Description The software fails to include SHTML files in its default list of dangerous files, allowing unrestricted uploads of these files. On servers configur...
PT-2026-80396
Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability in github.com/apache/answer...
PT-2026-77278
Malcolm's upload-processing pipeline scripts/safe-extract.py enforces entry-count, nesting-depth, and total-uncompressed-byte limits when extracting container archives zip/tar/rar/7z via libarchive, but those limits are not applied when the uploaded file is a single-stream compressed format .gz,...