Atlassian Confluence Download Attachments - Remote Code Execution

Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add attachments to pages and / or blogs or to create a new space or a personal space or who has 'Admin' permissions for a space can exploit this pat...

gophish

Fork di Gophish Questo è un fork di Gophish: toolkit per phishing open-source Gophish Nuove funzionalità Questo fork è incentrato sull'esecuzione di campagne di phishing reali per un singolo cliente. Sono state aggiunte le seguenti funzionalità: Script per configurare automaticamente un'istanza...

CVE-2024-9756

🚀 Exploit di Caricamento Arbitrario di File WooCommerce CVE-2024-9756 📌 Panoramica Questo exploit sfrutta una vulnerabilità di caricamento arbitrario limitato e non autorizzato nel plugin Order Attachments for WooCommerce versioni 2.0 - 2.4.1 per WordPress. La vulnerabilità consente a utenti...

CVE-2026-29780

Path Traversal nello Script di Esempio Ufficiale che Porta a Scrittura Arbitraria di File Riepilogo Lo script di esempio ufficiale examples/recursivelyextractattachments.py contiene una vulnerabilità di path traversal che consente la scrittura arbitraria di file al di fuori della directory di...

CVE-2026-18080

The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 1.17.8 via the saveattachments function. This is due to missing file extension validation and missing path normalization whe...

CVE-2025-66956

CVE-2025-66956 Eine unsichere Zugriffskontrolle in den Komponenten Contact Plan, E-Mail, SMS und Fax in Asseco SEE Live 2.0 ermöglicht Remote-Angreifern, über eine berechenbare URL auf Anhänge zuzugreifen und diese auszuführen. CVSS-Vektoren CVSS 3.1: 9.8,...

Astra Linux – Vulnerability in emacs

In Emacs versions before 29.3, LaTeX preview is enabled by default for e-mail attachments...

CVE-2026-76215

phpMyFAQ before 4.1.7 fails to apply parent FAQ visibility checks before returning child resources including comments and attachments. Unauthenticated attackers can retrieve restricted comment text, commenter email addresses, and attachment filenames for FAQ records they cannot directly access by...

EUVD-2026-62456

phpMyFAQ before 4.1.7 fails to apply parent FAQ visibility checks before returning child resources including comments and attachments. Unauthenticated attackers can retrieve restricted comment text, commenter email addresses, and attachment filenames for FAQ records they cannot directly access by...

CVE-2026-76215 phpMyFAQ before 4.1.7 Missing Authorization via child resources

phpMyFAQ before 4.1.7 fails to apply parent FAQ visibility checks before returning child resources including comments and attachments. Unauthenticated attackers can retrieve restricted comment text, commenter email addresses, and attachment filenames for FAQ records they cannot directly access by...

PT-2026-78777

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description A user with the schedule search capability can configure PD...

PT-2026-78397

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.7 Description An issue exists where the software fails to apply visibility checks for parent FAQ records before returning associated child resources. Unauthenticated attackers can retrieve restricted comment text...

CVE-2026-50768

File Upload vulnerability in T-Systems International GmbH ImageMaster Version: 9.14.2.8.1 allows a remote attacker to execute arbitrary code via the add attachments feature in the create new document function...

UBUNTU-CVE-2026-74999

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the "Add to address book" action was subject to stored XSS...

CVE-2026-50768

File Upload vulnerability in T-Systems International GmbH ImageMaster Version: 9.14.2.8.1 allows a remote attacker to execute arbitrary code via the add attachments feature in the create new document function...

EUVD-2026-60358

File Upload vulnerability in T-Systems International GmbH ImageMaster Version: 9.14.2.8.1 allows a remote attacker to execute arbitrary code via the add attachments feature in the create new document function...

CVE-2026-73531 django-helpdesk < 2.3.3 Stored XSS via HTML Attachments

django-helpdesk before 2.3.3 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary JavaScript by submitting HTML-formatted email messages or uploading .html/.htm file attachments through public ticket submission channels. Attackers can...

CVE-2026-73531

The CVE concerns django-helpdesk prior to 2.3.3, where a stored XSS vulnerability exists via HTML attachments or HTML-formatted emails submitted through public ticket channels. The root cause is insufficient sanitization and insecure Content-Disposition handling at the attachment-serving layer, e...

CVE-2026-73531 django-helpdesk < 2.3.3 Stored XSS via HTML Attachments

django-helpdesk before 2.3.3 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary JavaScript by submitting HTML-formatted email messages or uploading .html/.htm file attachments through public ticket submission channels. Attackers can...

CVE-2026-73498 MCP Atlassian is a Model Context Protocol (MCP): Arbitrary file read via missing path validation in confluence_upload_attachment

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, confluenceuploadattachment passes its client-supplied filepath directly to openfilepath, "rb" in src/mcpatlassian/confluence/attachments.py through uploadattachmentdirect without...