Avaya Aura Device Services - OS Command Injection

An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution as the Web server user via a malicious uploaded file. This issue affects Avaya Aura Device Services version 8.1.4.0 and earlier. id: CVE-2023-3722 info: name:...

traQ: XSS in the User Uploaded File Retrieval API

Impact For instances where TRAQSTORAGETYPE is set to local, the file retrieval API /files/fileId could serve user-uploaded SVG or HTML files in a way that allowed them to be rendered directly in the browser. As a result, an attacker who can upload files to traQ could upload a crafted SVG or HTML...

GHSA-P74G-F95M-7FX7 traQ: XSS in the User Uploaded File Retrieval API

Impact For instances where TRAQSTORAGETYPE is set to local, the file retrieval API /files/fileId could serve user-uploaded SVG or HTML files in a way that allowed them to be rendered directly in the browser. As a result, an attacker who can upload files to traQ could upload a crafted SVG or HTML...

GeoNode has OS command injection via uploaded file layer name

Arbitrary OS commands can be executed on the GeoNode by uploading a vector file with a crafted layer name...

EUVD-2026-118477

GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to 5.1.0, a crafted vector file layer name supplied during upload allows a low-privileged remote user to inject shell syntax and execute arbitrary operating-system commands o...

CVE-2026-63197 traQ: XSS in the User Uploaded File Retrieval API

traQ is a messenger application built for Digital Creators Club traP. Prior to 3.28.3, instances configured with TRAQSTORAGETYPE=local can return user-uploaded SVG or HTML content from the /files/fileId retrieval endpoint for direct browser rendering. An attacker with file-upload capability can...

CVE-2026-63197 traQ: XSS in the User Uploaded File Retrieval API

traQ is a messenger application built for Digital Creators Club traP. Prior to 3.28.3, instances configured with TRAQSTORAGETYPE=local can return user-uploaded SVG or HTML content from the /files/fileId retrieval endpoint for direct browser rendering. An attacker with file-upload capability can...

CVE-2026-63197

The messenger application traQ is vulnerable to Cross-Site Scripting (XSS) in its User Uploaded File Retrieval API. In versions prior to 3.28.3 , instances configured with TRAQ_STORAGE_TYPE=local allow the /files/{fileId} endpoint to return user-uploaded SVG or HTML content for direct browser ren...

CVE-2026-63197 traQ: XSS in the User Uploaded File Retrieval API

traQ is a messenger application built for Digital Creators Club traP. Prior to 3.28.3, instances configured with TRAQSTORAGETYPE=local can return user-uploaded SVG or HTML content from the /files/fileId retrieval endpoint for direct browser rendering. An attacker with file-upload capability can...

CVE-2020-9484

Remote Code Execution Exploit in Apache Tomcat 9.0.27 Apache Tomcat 9.0.27 is vulnerable to Remote Code Execution with the CVE-ID CVE-2020-9484. Other versions may be affected as well. Tested on Kali 2020.4 and JDK 8. This bash script is a simpel proof-of-concept. For educational purpose only...

PT-2026-133728

A vulnerability was determined in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. This vulnerability affects the function move uploaded file of the file admin/add logs.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack...

PT-2026-117442

A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This impacts the function move uploaded file of the file home.php. The manipulation of the argument my img leads to unrestricted upload. Remote exploitation of the attack is...

Viraj Potdar Criminal-Management-System: Vulnerabilities in Permission Authorization and Access Control Mechanisms

The Viraj Potdar criminal-management-system has a security vulnerability. This vulnerability stems from improper handling of the parameter ‘myimg’ in the ‘move Uploaded File’ function within the ‘home.php’ file. As a result, arbitrary file uploads can occur, and this vulnerability may be exploite...

CVE-2026-63147 Omnispace Agora Project < 26.10.0 Stored XSS via Uploaded File Name

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious script by uploading a file with HTML/script markup embedded in its filename, which bypasses the paramFilter since uploaded-file names arrive through $FIL...

PT-2026-111294

Name of the Vulnerable Software and Affected Versions SourceCodester Library Management System version 1.0 Description A security flaw allows remote attackers to perform unrestricted file uploads. This occurs through the manipulation of the image argument within the move uploaded file function...

PT-2026-110441

A security flaw has been discovered in prasathmani TinyFileManager up to 2.6. The impacted element is the function move uploaded file of the file tinyfilemanager.php. Performing a manipulation of the argument fullpath results in unrestricted upload. The attack is possible to be carried out...

Cross-site Scripting (XSS)

Overview @payloadcms/storage-gcs is a Payload storage adapter for Google Cloud Storage Affected versions of this package are vulnerable to Cross-site Scripting XSS via insufficient validation of upload file identity and XML/SVG content delivery in the uploads pipeline. An authenticated attacker c...

Cross-site Scripting (XSS)

Overview @payloadcms/storage-s3 is a Payload storage adapter for Amazon S3 Affected versions of this package are vulnerable to Cross-site Scripting XSS via insufficient validation of upload file identity and XML/SVG content delivery in the uploads pipeline. An authenticated attacker can upload a...

CVE-2026-101067

A vulnerability was identified in dbgate up to 6.8.1/7.0.2/7.1.8/7.2.5/7.3.1. This affects the function saveUploadedFile of the file files.js of the component save-uploaded-file Endpoint. Such manipulation of the argument filePath/fileName leads to path traversal. The attack may be launched...

CVE-2026-101067

A path traversal vulnerability exists in dbgate versions up to 6.8.1, 7.0.2, 7.1.8, and 7.2.5. The flaw resides in the saveUploadedFile function of the files.js file within the save-uploaded-file endpoint. By manipulating the filePath or fileName arguments, an attacker can perform path traversal....