CVE-2026-92820 Ninja Forms - File Uploads <= 3.3.34 - Unauthenticated Arbitrary File Upload

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file operations in all versions up to, and including, 3.3.34 via the external Amazon S3 upload flow. The plugin trusts an attacker-supplied file path from the form submission and stores it as the upload's filepath, whi...

EUVD-2026-91175

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file operations in all versions up to, and including, 3.3.34 via the external Amazon S3 upload flow. The plugin trusts an attacker-supplied file path from the form submission and stores it as the upload's filepath, whi...

CVE-2026-92820

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file operations in all versions up to and including 3.3.34 . The root cause is that the plugin trusts an attacker-supplied file path from form submissions during the External File Upload (Amazon S3) flow. This unvalida...

Cisco VPN Routers - Unauthenticated Arbitrary File Upload

A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement...

EUVD-2009-5121

ContentKeeper Web Appliance now maintained by Impero Software versions prior to 125.10 are vulnerable to remote command execution due to insecure handling of file uploads via the mimencode CGI utility. The vulnerability allows unauthenticated attackers to upload and execute arbitrary scripts as t...

PT-2026-104083

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file operations in all versions up to, and including, 3.3.34 via the external Amazon S3 upload flow. The plugin trusts an attacker-supplied file path from the form submission and stores it as the upload's file path,...

CVE-2026-0740

CVE-2026-0740 : Ninja Forms - File Upload = 3.3.26 認証なし任意ファイルアップロード 説明 : WordPress用プラグイン「Ninja Forms - File Uploads」は、全バージョン（3.3.26を含む）において、NFFUAJAXControllersUploads::handleupload 関数にファイルタイプの検証と権限チェックが欠如しているため、認証なしの任意ファイルアップロードに対して脆弱です。 この欠陥により、認証されていない攻撃者は以下を行うことが可能です： 任意の fieldid...

WordPress Ninja Forms - File Uploads plugin <= 3.3.34 - Unauthenticated Arbitrary File Upload vulnerability

WordPress Ninja Forms - File Uploads plugin = 3.3.34 - Unauthenticated Arbitrary File Upload vulnerability discovered by daroo in WordPress Plugin Ninja Forms File Uploads Extension versions = 3.3.34...

Atom-CMS-2.0---File-Upload-Remote-Code-Execution-Un-Authenticated-POC

Atom-CMS-2.0---ファイルアップロード-リモートコード実行-認証なし- リモートコード実行 RCE エクスプロイト作者: Ashish Koli Shikari ベンダーホームページ: https://thedigitalcraft.com/ ソフトウェアリンク: https://github.com/thedigicraft/Atom.CMS バージョン: 2.0 CVE: CVE-2022-25487 これについて: このスクリプトは、Atom CMS に webshell.php をアップロードします。アプリケーションはそのファイルを保存します。 一意の番号を持つ...

CVE-2024-22515-File-Upload-Vulnerability

CVE-2024-22515: File Upload Vulnerability in Agent DVR Information Description In iSpyConnect.com Agent DVR 5.1.6.0, there is a lack of verification of file type for sound file uploads. This allows an authenticated user to upload any file type through the upload audio component simply by toggling...

CVE-2025-14564

The Viable URL Media Uploader plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access...

EUVD-2025-211018

The Viable URL Media Uploader plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access...

NPM: multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads

NPM: multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads vulnerability discovered by ? in WordPress Npm multer versions = 2.2.0, 2.4.0...

chyrp-lite-rce-poc

chyrp-lite-rce-poc CVE-2026-53767 + CVE-2026-53768 - Chyrp Lite ≤ 2026.01（"Iriomote"）における認証済みRCE 連鎖攻撃: uploadspath ブロックリストバイパス（CVE-2026-53768）+ adminupdateupload におけるファイル拡張子検証の欠如（CVE-2026-53767）→ www-data としてのリモートコード実行 概要 Chyrp Lite ≤ 2026.01 は、changesettings および editupload...

CVE-2026-77633

Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, PrepareUpload in pkg/filemanager/fs/dbfs/upload.go checks a stale in-memory user storage value through validateUserCapacity and later applies an unconditional storage charge outside the same quota-enforcing transactio...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-090061)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090061 advisory. In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names coul...

CVE-2026-76870: Out-of-bounds Read

Netcore NR255-V version 1.5.130703 contains an out-of-bounds read vulnerability in the mtdwrite pre-flash validation routine triggered by short firmware uploads. Attackers can upload a truncated firmware image via putfilecgi.c to trigger out-of-bounds reads across main.c, checkimageuuid.c, and...

Astra Linux – Vulnerability in Velocity

An attacker who is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/modify Velocity templates running Apache...

Astra Linux – Vulnerability in Tomcat9

Path Equivalence: The use of ‘file.Name’ an internal dot notation can lead to Remote Code Execution, information disclosure, or the addition of malicious content to uploaded files via the write-enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat versions as follows: 11.0.0-...

CVE-2026-88932

multer is a Node.js middleware for handling multipart/form-data uploads. In versions 2.2.0 through 2.3.0, when a request using disk storage is aborted mid-upload, file writes that complete after multer has already run its abort cleanup are not removed, so each aborted upload can leave an orphaned...