chyrp-lite-rce-poc

chyrp-lite-rce-poc CVE-2026-53767 + CVE-2026-53768 - Chyrp Lite ≤ 2026.01（“Iriomote”）中的已认证 RCE 漏洞 链式攻击： uploadspath 黑名单绕过（CVE-2026-53768）+ adminupdateupload 缺少文件扩展名验证（CVE-2026-53767）→ 以 www-data 身份远程执行代码 概述 Chyrp Lite ≤ 2026.01 存在已认证远程代码执行链漏洞，任何拥有 changesettings 和 editupload 权限（默认为管理员）的用户均可利用。...

PT-2026-91122

multer is a Node.js middleware for handling multipart/form-data uploads. In versions 2.2.0 through 2.3.0, when a request using disk storage is aborted mid-upload, file writes that complete after multer has already run its abort cleanup are not removed, so each aborted upload can leave an orphaned...

CVE-2021-42671

CVE-2021-42671 CVE-2021-42671 - エンジニアズオンラインポータルシステムにおけるアクセス制御の破損の脆弱性。 技術的な説明: Engineers Online Portal には、アクセス制御の破損の脆弱性が存在します。攻撃者はこの脆弱性を悪用してアクセス制御をバイパスし、認証や認可を必要とせずに Web サーバーにアップロードされたすべてのファイルにアクセスできます。 脆弱なドメイン - http://localhost/niamunozmonitoringsystem/admin/uploads/ 概念実証 PoC -...

Cisco VPN Routers - Unauthenticated Arbitrary File Upload

A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement...

CVE-2026-Pending-Flask-Uploads-Path-Traversal-PoC

CVE-2026-XXXXX Pending: Flask-Uploads中的路径遍历 漏洞信息 产品 ：Flask-Uploads 版本 ：0.2.1（以及可能更早的版本） 漏洞类型 ：路径遍历（目录遍历） CWE-ID : CWE-22 严重性 ：高 CVSS 7.5 影响 ：任意文件写入，远程代码执行 RCE 描述 在 Flask-Uploads 0.2.1 版本中存在一个严重的路径遍历漏洞。该库在将上传文件保存到文件系统之前，未能正确清理文件名。 具体来说，flaskuploads.py 中的 save 方法直接使用 os.path.join...

cve-2020-10977

CVE-2020-10977 GitLab 12.9.0 任意文件读取 目标： 12.9.0 及以下版本 测试版本： GitLab 12.8.1 在最近的一次客户项目中，我在目标上发现了一个 GitLab 实例。我在 Exploit-DB 上找到了一个 PoC，但它使用的是 LDAP 认证，而在此情况下 LDAP 禁用了，所以我编写了这个 Python 脚本，它可以使用 Web 界面进行认证。与原始 PoC 类似，它将创建两个项目、在一个项目中创建一个带有恶意 payload 的 issue，然后将该 issue 从一个项目移动到另一个项目，并自动读取文件内容。...

CVE-2015-4133

CVE-2015-4133 root@kitploit: usage: CVE-2015-4133.py -h --RHOST RHOST --RPORT RPORT -v YEAR MONTH FILE ReFlex Gallery WordPress plugin = 3.1.3 CVE-2015-4133 PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2015-4133 positional arguments: YEAR wp-content/uploads sub directory MONTH...

GHSA-7GHQ-V6JF-G56C Traefik: respondingTimeouts.readTimeout is not applied to HTTP/3, leaving slow-body uploads unbounded

Summary There is a medium severity vulnerability in Traefik's HTTP/3 entry points: the respondingTimeouts settings were not applied to the HTTP/3 request path. readTimeout in particular is on by default at 60s and is documented as bounding the time to read the entire request including its body, b...

multer vulnerable to Denial of Service via file descriptor leak on aborted uploads

Impact A vulnerability in multer 2.2.0 allows an attacker to trigger a Denial of Service DoS by aborting or truncating multipart uploads. When using diskStorage, the destination write stream is not closed if the upload is aborted before it finishes, so each failed request leaks an open file...

EUVD-2026-72507

In JetBrains YouTrack before 2026.2.18634 stored XSS was possible via project and organization icon uploads...

CVE-2026-86491

JetBrains YouTrack versions prior to 2026.2.18634 were affected by a stored XSS vulnerability exploitable through project and organization icon uploads . An attacker with high privileges (e.g., an authenticated user with project or organization admin rights) could inject malicious scripts that ex...

CVE-2026-86491

In JetBrains YouTrack before 2026.2.18634 stored XSS was possible via project and organization icon uploads...

MAL-2026-15936 Malicious code in trongridew (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 598687794d8452d6845a3529e26bf63838cedee736dc0b8545ad33abe2e827f3 The package exposes a single public function permprivatekey in main.py that unconditionally POSTs the caller-supplied Tron private key as JSON to the...

CVE-2026-19769

The Ninja Forms WordPress plugin (versions ≤ 3.15.1 ) is affected by an unauthenticated Stored Cross-Site Scripting (XSS) vulnerability caused by insufficient input sanitization and output escaping in the Repeater Child 'type' field. When the File Uploads add-on is active, an attacker can route a...

CVE-2026-19769 Ninja Forms <= 3.15.1 - Unauthenticated Stored Cross-Site Scripting via Repeater Child 'type' Confusion via Unmatched Array Key

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Repeater Child 'type' Confusion via Unmatched Array Key in all versions up to, and including, 3.15.1 due to insufficient input sanitization and output escaping. Thi...

EUVD-2026-71880

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Repeater Child 'type' Confusion via Unmatched Array Key in all versions up to, and including, 3.15.1 due to insufficient input sanitization and output escaping. Thi...

CVE-2026-81773

Unauthenticated Cross Site Scripting XSS in Ninja Forms File Uploads Extension = 3.3.26 versions...

CVE-2026-81773 WordPress Ninja Forms File Uploads Extension plugin <= 3.3.26 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Ninja Forms File Uploads Extension = 3.3.26 versions...

EUVD-2026-70564

Unauthenticated Cross Site Scripting XSS in Ninja Forms File Uploads Extension = 3.3.26 versions...

CVE-2026-81773

CVE-2026-81773 affects the WordPress Ninja Forms File Uploads Extension plugin in versions 3.3.26 and below . The vulnerability is an unauthenticated Cross-Site Scripting (XSS) flaw, meaning no prior authentication is required to exploit it. The CVSS 3.1 base score is 7.1 (HIGH) with a vector of ...