MAL-2026-11124 Malicious code in api-node-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8133fdea40df12d51091c8ce094062f366f0c30be0d17667a827ed00b75f78a On npm install, the package's postinstall hook node test.js executes an attacker-controlled workflow against the installer's host. It recursively sca...

Kavita - Local File Inclusion Detection

Kavita - Path Traversal is vulnerable to local file inclusion via abusing the Path Traversal filename parameter of the /api/image/cover-upload. !/usr/bin/env python3 -- coding: utf-8 -- """Kavita - Path Traversal is vulnerable to local file inclusion via abusing the Path Traversal filename...

WPvivid Backup & Migration <= 0.9.123 - Arbitrary File Upload Detection

WPvivid Backup & Migration plugin for WordPress = 0.9.123 contains an unauthenticated arbitrary file upload vulnerability caused by improper error handling in RSA decryption and lack of path sanitization, letting unauthenticated attackers upload arbitrary PHP files and achieve remote code executi...

Luftguitar CMS Arbitrary File Upload Detection

A vulnerability in Luftguitar CMS allows remote unauthenticated users to upload files to the remote service via the 'ftb.imagegallery.aspx' endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in Luftguitar CMS allows remote unauthenticated users to upload files to the remote...

McAfee ePolicy Orchestrator - Arbitrary File Upload Detection

McAfee ePolicy Orchestrator ePO is vulnerable to a ZipSlip vulnerability which allows arbitrary file upload when archives are unpacked if the names of the packed files are not properly sanitized. An attacker can create archives with files containing "../" in their names, making it possible to...

Wanhu OA OfficeServerServlet - Arbitrary File Upload Detection

Wanhu OA officeserverservlet file upload vulnerability !/usr/bin/env python3 -- coding: utf-8 -- """Wanhu OA officeserverservlet file upload vulnerability.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wanhu OA...

Zhiyuan OA Arbitrary File Upload Vulnerability Detection

A vulnerability in Zhiyuan OA allows remote unauthenticated attackers to upload arbitrary files to the remote server and cause execute arbitrary code to be executed. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in Zhiyuan OA allows remote unauthenticated attackers to upload...

PrestaShop < 1.7.6.6 - Information Exposure via Upload Directory Detection

PrestaShop versions after 1.5.0.0 and before 1.7.6.6 are vulnerable to information exposure through directory listing in the upload directory due to a missing index.php file. !/usr/bin/env python3 -- coding: utf-8 -- """PrestaShop versions after 1.""" from kittysploit import from...

Wanhu OA smartUpload.jsp - Arbitrary File Upload Detection

Wanhu OA smartUpload.jsp file has a file upload interface and does not filter file types, resulting in arbitrary file upload vulnerabilities. Malicious JSP files can be uploaded directly. !/usr/bin/env python3 -- coding: utf-8 -- """Wanhu OA smartUpload.""" from kittysploit import from...

Güralp MAN-EAM-0003 3.2.4 - XML External Entity (XXE) Detection

cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity XXE issue via XML file upload, which leads to local file disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """cgi-bin/xmlstatus.""" import re from kittysploit import from lib.protocols.http.httpclient...

Zimbra Collaboration - Unrestricted File Upload Detection

An issue was discovered in Zimbra Collaboration ZCS 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole extraction to /opt/zimbra/jetty/webapps/zimbra/public that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also,...

PaperCut < 22.1.3 - Path Traversal Detection

PaperCut NG and PaperCut MF before 22.1.3 are vulnerable to path traversal which enables attackers to read, delete, and upload arbitrary files. !/usr/bin/env python3 -- coding: utf-8 -- """PaperCut NG and PaperCut MF before 22.""" from kittysploit import from lib.protocols.http.httpclient import...

BlueImp jQuery-File-Upload - Arbitrary File Upload Detection

BlueImp jQuery-File-Upload does not require validation to upload files to the server and does not exclude file types, which can lead to a remote code execution vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """BlueImp jQuery-File-Upload does not require validation to upload files to the...

WordPress Fancy Product Designer <4.6.9 - Arbitrary File Upload Detection

WordPress Fancy Product Designer plugin before 4.6.9 is susceptible to an arbitrary file upload. An attacker can upload malicious files and execute code on the server, modify data, and/or gain full control over a compromised system without authentication. !/usr/bin/env python3 -- coding: utf-8 --...

Adning Advertising <= 1.5.5 - Arbitrary File Upload Detection

The Adning Advertising plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ninguploadimage function in versions up to, and including, 1.5.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites...

Cisco HyperFlex HX Data Platform - Arbitrary File Upload Detection

Cisco HyperFlex HX Data Platform contains an arbitrary file upload vulnerability in the web-based management interface. An attacker can send a specific HTTP request to an affected device, thus enabling upload of files to the affected device with the permissions of the tomcat8 user. !/usr/bin/env...

Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload Detection

The plugin does not validate signatures when creating them on the server from user input, allowing unauthenticated users to create arbitrary files and lead to RCE. !/usr/bin/env python3 -- coding: utf-8 -- """The plugin does not validate signatures when creating them on the server from user input...

Drupal 7 Elfinder - Unauthenticated Connector Exposure Detection

Identifies Drupal sites with the elfinder library installed, which could be vulnerable to unrestricted file upload through the connector.php file.When this component is detected, the site may be vulnerable to remote code execution attacks via PHP file uploads.This template only detects the presen...

Oracle E-Business Suite 12.2.3 -12.2.11 - Remote Code Execution Detection

Oracle E-Business Suite 12.2.3 through 12.2.11 is susceptible to remote code execution via the Oracle Web Applications Desktop Integrator product, Upload component. An attacker with HTTP network access can execute malware, obtain sensitive information, modify data, and/or gain full control over a...

WordPress File Manager Plugin - Remote Code Execution Detection

The WordPress File Manager plugin prior to version 6.9 is susceptible to remote code execution. The vulnerability allows unauthenticated remote attackers to upload .php files. !/usr/bin/env python3 -- coding: utf-8 -- """The WordPress File Manager plugin prior to version 6.""" from kittysploit...