CVE-2026-101112

Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms 2.4.3.4 - The public removeTmpAttachment action accepts an integer attachment ID and deletes the matching database row and file. The controller verifies a Joomla session token, but the model does not bind that ...

CVE-2026-101112

The Joomla Extension - balbooa.com - Balbooa Forms version

CVE-2026-100287

Missing authorization in the attachment history API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to permanently delete or restore vault attachments via a crafted API request...

CVE-2026-34212

CVE-2026-34212 Docmost a accepté une URL de type javascript: dans un nœud de pièce jointe, l’a conservée lors du stockage et du rendu, et l’a transformée en un lien cliquable dans l’origine de Docmost. Introduction J’ai identifié, divulgué de manière responsable et reproduit un problème de stored...

CVE-2026-100287

The Devolutions Server (version 2026.3.5.0 and earlier) is vulnerable to a missing authorization flaw in the attachment history API . This vulnerability allows an authenticated low-privileged user to perform unauthorized actions, specifically the ability to permanently delete or restore vault att...

CVE-2026-100287

Missing authorization in the attachment history API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to permanently delete or restore vault attachments via a crafted API request...

EUVD-2026-89018

Missing authorization in the attachment history API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to permanently delete or restore vault attachments via a crafted API request...

CVE-2026-100287

Missing authorization in the attachment history API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to permanently delete or restore vault attachments via a crafted API request...

CVE-2026-48939

CVE-2026-48939 — Exploitation RCE iCagenda pour Joomla Téléversement arbitraire de fichier sans authentification → Exécution de code PHP Aperçu CVE-2026-48939 est une vulnérabilité critique CVSS 10.0 dans l'extension de calendrier d'événements iCagenda pour Joomla. La fonction de pièce jointe du...

LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298

LetsDefend SOC336 : Détection d'une exploitation RCE Zero-Click OLE Windows Ce dépôt documente mon enquête sur une alerte LetsDefend impliquant une exploitation RCE zero-click OLE Windows liée à CVE-2025-21298. L'objectif est de montrer le raisonnement derrière la conclusion, du triage des e-mail...

CVE-2024-39929

Эксплойт PoC для Exim CVE-2024-39929 Этот репозиторий содержит скрипт Proof-of-Concept PoC для эксплуатации уязвимости Exim CVE-2024-39929. Уязвимость затрагивает версии Exim до 4.98, позволяя злоумышленникам обходить механизмы блокировки расширений файлов и потенциально доставлять исполняемые...

CVE-2025-32432

CVE-2025-32432 Craft CMS — PoC RCE pré-auth Exécution de code à distance critique avant authentification dans Craft CMS Versions concernées : Craft CMS 3.x, 4.x et 5.x jusqu'à 5.6.16 Info : Cet exploit a été testé contre la machine Orion de HackTheBox Aperçu Ce dépôt contient un exploit...

PT-2026-102704

Name of the Vulnerable Software and Affected Versions Balbooa Forms versions prior to 2.4.3.4 Description An issue exists where the public removeTmpAttachment action allows the deletion of database rows and files by accepting an integer attachment ID. While the controller verifies a Joomla sessio...

CVE-2026-34213

CVE-2026-34213 Un utilisateur Docmost à faibles privilèges pourrait fournir un attachmentId victime au point de terminaison de téléversement générique et écraser la pièce jointe stockée d'une autre page dans le même espace de travail. Introduction J'ai identifié, divulgué de manière responsable e...

CVE-2026-101071

A vulnerability was determined in Acrel Electric Unet Web Service up to 20260814. This vulnerability affects unknown code of the file /exchange/attachment/upload of the component Upload Endpoint. This manipulation of the argument File causes unrestricted upload. The attack can be initiated...

CVE-2025-65318-and-CVE-2025-65319

PoC pour CVE-2025-65318 et CVE-2025-65319 CVE-2025-65318 BDU:2025-13740: Lors de l'utilisation de la fonctionnalité d'interaction avec les pièces jointes, Canary Mail 5.1.40 et versions antérieures enregistre les documents dans un système de fichiers sans balise Mark-of-the-Web, ce qui permet aux...

CVE-2026-101071 Acrel Electric Unet Web Service Upload Endpoint upload unrestricted upload

A vulnerability was determined in Acrel Electric Unet Web Service up to 20260814. This vulnerability affects unknown code of the file /exchange/attachment/upload of the component Upload Endpoint. This manipulation of the argument File causes unrestricted upload. The attack can be initiated...

CVE-2026-101071 Acrel Electric Unet Web Service Upload Endpoint upload unrestricted upload

A vulnerability was determined in Acrel Electric Unet Web Service up to 20260814. This vulnerability affects unknown code of the file /exchange/attachment/upload of the component Upload Endpoint. This manipulation of the argument File causes unrestricted upload. The attack can be initiated...

EUVD-2026-88048

A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download of the file packages/Webkul/Admin/src/Config/acl.php of the component attachment-download Endpoint. The manipulation of the argument ID leads to improper control of resource...

CVE-2026-84744: Improper Control of Generation of Code

The WPForms Lite WordPress plugin from 1.5.0.1 to 2.0.2 does not remove shortcode delimiters from submitted field values before writing them back into the rendered form, allowing unauthenticated users to execute arbitrary shortcodes registered on the site and read the details of attachments...