3711 matches found
Atlassian Confluence Download Attachments - Remote Code Execution
Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add attachments to pages and / or blogs or to create a new space or a personal space or who has 'Admin' permissions for a space can exploit this pat...
CVE-2025-57231
CVE-2025-57231 - Docmost 0.22.0 - Lectura arbitraria de archivos Este repositorio contiene un exploit de Prueba de Concepto PoC para CVE-2025-57231. Descargo de responsabilidad Este proyecto se proporciona únicamente con fines educativos y para pruebas de seguridad autorizadas. No lo utilice cont...
MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issue
Summary A critical Confused Deputy Arbitrary File Read & Exfiltration vulnerability in the Atlassian MCP server Python allows an AI agent to exfiltrate sensitive host files and environment secrets. By providing absolute system paths to the attachments parameter of the updateissue tool, an agent c...
gophish
Gophish fork This is a fork of Gophish: Open-Source Phishing Toolkit Gophish New features This fork has a focus on running real-life phishing campaigns for a single customer. The following features are added: Script to automatically setup a fully configured Gophish instance on a fresh VPS. This...
EUVD-2026-84741
MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, HTTP-exposed Jira and Confluence upload tools pass a caller-provided filepath to local file operations without restricting it to the workspace. A remote MCP caller with tool access ca...
CVE-2024-9756
🚀 WooCommerce Arbitrary File Upload Exploit CVE-2024-9756 📌 Overview This exploit leverages an unauthorized limited arbitrary file upload vulnerability in the Order Attachments for WooCommerce plugin versions 2.0 to 2.4.1 for WordPress. The vulnerability allows authenticated users Subscriber+ to...
CVE-2025-66956
CVE-2025-66956 Insecure Access Control in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote attackers to access and execute attachments via a computable URL. CVSS Vectors CVSS 3.1: 9.8, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS 4.0: 10.0,...
CVE-2026-29780
官方示例脚本中的路径遍历漏洞导致任意文件写入 摘要 官方示例脚本 examples/recursivelyextractattachments.py 包含一个路径遍历漏洞，允许在预期输出目录之外进行任意文件写入。从解析的邮件中提取的附件文件名未经任何清理直接用于构造输出文件路径，使得攻击者控制的文件名能够逃逸目标目录。 详情 文件：examples/recursivelyextractattachments.py 行号：61–64 root@kitploit: for a in m'attachment': outfilepath = outpath / a'filename' 无清理...
CVE-2026-87258
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Folders, Files & Attachments. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful...
CVE-2026-87254
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Folders, Files & Attachments. The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful...
CVE-2026-87258
Oracle Agile PLM (Oracle Supply Chain) is affected in component Folders, Files & Attachments on supported version 9.3.6 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful exploitation requires human interaction from a user other than the att...
EUVD-2026-79911
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Folders, Files & Attachments. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful...
EUVD-2026-79908
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Folders, Files & Attachments. The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful...
CVE-2026-87254
CVE-2026-87254 affects Oracle Agile PLM (product of Oracle Supply Chain), specifically the Folders, Files & Attachments component, in supported version 9.3.6 . The vulnerability is difficult to exploit but allows a low-privileged attacker with network access via HTTP (no user interaction required...
CVE-2026-68533
Concrete CMS below 9.5.3 conversation attachment uploaded endpoint imported files into the file manager before evaluating the "Add Message Attachments" permission, which was only checked after the file had been stored. A user denied that permission, or an unauthenticated visitor on a guest-postin...
EUVD-2026-79144
Concrete CMS below 9.5.3 conversation attachment uploaded endpoint imported files into the file manager before evaluating the "Add Message Attachments" permission, which was only checked after the file had been stored. A user denied that permission, or an unauthenticated visitor on a guest-postin...
Astra Linux – Vulnerability in emacs
In Emacs versions before 29.3, LaTeX preview is enabled by default for e-mail attachments...
Astra Linux – Vulnerability in exim4
In versions of Exim up to 4.97.1, Misparse processes multi-line RFC 2231 header filenames. As a result, remote attackers can bypass the protection mechanism that blocks $mimefilename extensions, and potentially deliver executable attachments to the mailboxes of end users...