85696 matches found
CVE-2025-57298
Kotaemonにおける安全でないMarkdownレンダリングによる格納型XSS 概要 Kotaemonは、PDF、Word、Excelなどのアップロードされた文書を照会するためのWebインターフェースを提供する、オープンソースのRAG（Retrieval-Augmented Generation：検索拡張生成）ベースの文書QAシステムです。 Kotaemonの文書レンダリングパイプラインには、格納型クロスサイトスクリプティング（XSS）の脆弱性が存在します。...
CVE-2026-19386
A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload that exceeds the expected buffer size.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for...
Zimbra Collaboration - Unrestricted File Upload
An issue was discovered in Zimbra Collaboration ZCS 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole extraction to /opt/zimbra/jetty/webapps/zimbra/public that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also,...
Roxy Fileman 1.4.5 - Unrestricted File Upload
Roxy Fileman 1.4.5 is susceptible to unrestricted file upload via upload.php. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. id: CVE-2018-20526 info: name: Roxy Fileman 1.4.5 -...
DELMIA Apriso - Command Injection
An Improper Control of Generation of Code code injection / file upload → RCE vulnerability affecting DELMIA Apriso Release 2020 → Release 2025. When an authenticated user can upload files and the upload handler fails to canonicalize filenames or enforce storage restrictions, an attacker may place...
Chamilo LMS <= 1.11.24 - Remote Code Execution
Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS = v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell. id: CVE-2023-422...
Cisco HyperFlex HX Data Platform - Arbitrary File Upload
Cisco HyperFlex HX Data Platform contains an arbitrary file upload vulnerability in the web-based management interface. An attacker can send a specific HTTP request to an affected device, thus enabling upload of files to the affected device with the permissions of the tomcat8 user. id:...
SPIP BigUp Plugin - Remote Code Execution
SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request. id: CVE-2024-8517 info: name: SPIP BigUp Plugin - Remote Code Execution...
DotCMS - Arbitrary File Upload
DotCMS management system contains an arbitrary file upload vulnerability via the /api/content/ path which can allow attackers to upload malicious Trojans to obtain server permissions. id: CVE-2022-26352 info: name: DotCMS - Arbitrary File Upload author: h1ei1 severity: critical description: DotCM...
EUVD-2026-94157
A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload that exceeds the expected buffer size.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for...
CVE-2026-19386
A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload that exceeds the expected buffer size.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for...
CVE-2026-19386
A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload that exceeds the expected buffer size.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for...
CVE-2026-19386
A stack-based buffer overflow exists in ASUS router modules , which allows an authenticated nearby user to execute arbitrary code . This vulnerability is triggered by uploading a crafted configuration file that exceeds the expected buffer size. For specific details on affected versions and remedi...
CVE-2019-12889
CVE-2019-12889 요약 SailPoint Desktop Password Reset 7.2에는 인증되지 않은 권한 상승 취약점이 존재합니다. Windows 로그온 화면에만 로컬로 접근할 수 있는 사용자는 자신의 권한을 NT AUTHORITY\System으로 상승시킬 수 있습니다. 공격자는 성공적인 악용을 위해 머신에 대한 로컬 접근 권한이 필요합니다. 공격자는 컴퓨터를 로컬 네트워크/WAN에서 분리하고 인터넷에 연결된 액세스 포인트/네트워크에 연결해야 합니다. 그 시점에서 공격자는 비밀번호 재설정 기능을 실행할 수 있으...
CVE-2026-12793
CVE-2026-12793 — JetFormBuilder ≤ 3.6.2 未認証の権限昇格 → プラグインアップロード → RCE。 影響を受けるバージョン 脆弱: = 3.6.3 クイック使用法 単一ターゲットをチェック python poc.py -u https://target.example --mode check 完全なエクスプロイト（既存の低権限アカウントが必要） python poc.py -u https://target.example --mode exploit \ -nu subscriber -np 'Password123' -c id 一括スキャン...
CVE-2025-3616
Metasploit 모듈: Greenshift WordPress 플러그인 임의 파일 업로드 CVE-2025-3616 이 저장소는 Greenshift WordPress 플러그인11.411.4.5 버전의 임의 파일 업로드 취약점인 CVE-2025-3616 을 악용하기 위한 Metasploit 모듈을 포함합니다. 이 익스플로잇은 인증된 사용자Subscriber+가 임의 파일을 업로드하여 원격 코드 실행RCE으로 이어지게 합니다. GIF 매직 바이트GIF89a;로 MIME 유형을 스푸핑하여 플러그인의 파일 유형 검증을 우회합니다. 기...
CVE-2025-52691
CVE-2025-52691 SmarterMail 인증 없는 임의 파일 업로드 원격 코드 실행 RCE 개요 인증 없는 임의 파일 업로드로 원격 코드 실행이 가능한 치명적인 취약점입니다. 필드| 값 ---|--- 제품| SmarterMail 영향받는 버전| 빌드 9406 및 이전 버전 CVSS| 10.0 치명적 유형| 임의 파일 업로드 벡터| HTTP 인증 없음 영향| 원격 코드 실행 공격 흐름 flowchart LR AAttacker -- B"Find Upload Endpoint" B -- C"/api/upload" C --...
PT-2026-107479
Unrestricted file upload vulnerability in the BugTracker.NET attachment functionality. An authenticated user with administrator privileges could modify the application configuration to store files in a directory accessible via the web interface. Due to the lack of proper file extension validation...
PT-2026-107382
A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload that exceeds the expected buffer size.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for...