Lucene search
+L

34 matches found

Kitploit
Kitploit
•added 2026/10/07 2:42 p.m.•19 views

CVE-2018-9206-jquery-file-upload

CVE-2018-9206 - лаборатория Blueimp jQuery-File-Upload Уязвимое Docker-окружение для CVE-2018-9206 - неограниченная загрузка файлов в Blueimp jQuery-File-Upload ' Execute it curl "http://localhost:8888/jQuery-File-Upload/server/php/files/test.php" Output: CVE-2018-9206-PWNED Или запустите...

9.8CVSS8.5AI score0.97255EPSS
SaveExploits17
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•43 views

Blueimp jQuery-File-Upload v9.22.0 - Unrestricted File Upload

Blueimp jQuery-File-Upload v9.22.0 contains an unauthenticated arbitrary file upload caused by insufficient validation in the upload component, letting remote attackers upload malicious files, exploit requires no authentication. id: CVE-2018-9206 info: name: Blueimp jQuery-File-Upload v9.22.0 -...

9.8CVSS8.2AI score0.97255EPSS
SaveExploits17References4
GithubExploit
GithubExploit
•added 2025/12/27 2:31 a.m.•343 views

Exploit for Unrestricted Upload of File with Dangerous Type in Jquery_File_Upload_Project Jquery_File_Upload

CVE-2018-9206 - Blueimp jQuery-File-Upload Lab Vulnerable Doc...

9.8CVSS7.1AI score0.97255EPSS
SaveExploits17
OSV
OSV
•added 2025/11/22 10:00 a.m.•15 views

MAL-2025-190601 Malicious code in airbnb-blueimp-file-upload (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e31d7485138d523c3fc40982b857b4c758f73f46c1bd66952aa2f877625b480 The package airbnb-blueimp-file-upload was found to contain malicious code. Source: ossf-package-analysis...

6.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/22 10:00 a.m.•17 views

Malicious code in airbnb-blueimp-file-upload (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e31d7485138d523c3fc40982b857b4c758f73f46c1bd66952aa2f877625b480 The package airbnb-blueimp-file-upload was found to contain malicious code. Source: ossf-package-analysis...

6.9AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/22 10:00 a.m.•11 views

EUVD-2025-198538

Malicious code in airbnb-blueimp-file-upload npm...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/04/23 3:57 p.m.•7 views

Malicious code in packageblueimp-file-upload (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
Cvelist
Cvelist
•added 2019/10/10 4:20 p.m.•32 views

CVE-2015-9479

The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php...

9.7AI score0.02774EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/10 12:00 a.m.•3 views

CVE-2015-9479: Unrestricted Upload of File with Dangerous Type

The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php...

9.8CVSS8.3AI score0.02774EPSS
SaveExploits1References2
Packet Storm
Packet Storm
•added 2019/01/17 12:00 a.m.•175 views

Blueimp jQuery File Upload 9.22.0 Arbitrary File Upload

Exploit Title: Exploit for Blueimp's jQuery File Upload include include include include include include define BSIZE 1024 define DEBUG 1 define TESTONLY 0 void buildstring char p, char path, char arg, char ar1, int func; int main int argc, char argv int sock = 0, bytesread = 0, total = 0, functio...

7.5CVSS0.2AI score0.97255EPSS
SaveExploits17
exploitpack
exploitpack
•added 2019/01/16 12:00 a.m.•229 views

Blueimps jQuery File Upload 9.22.0 - Arbitrary File Upload Exploit

Blueimps jQuery File Upload 9.22.0 - Arbitrary File Upload Exploit Exploit Title: Exploit for Blueimp's jQuery File Upload include include include include include include define BSIZE 1024 define DEBUG 1 define TESTONLY 0 void buildstring char p, char path, char arg, char ar1, int func; int main...

7.5CVSS0.1AI score0.97255EPSS
SaveExploits17
Exploit DB
Exploit DB
•added 2018/11/06 12:00 a.m.•105 views

blueimp's jQuery 9.22.0 - (Arbitrary) File Upload (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "blueimp's jQuery Arbitrary File Upload", 'Description' = %q This module exploits an arbitrary file upload in the sample PHP upload handler for...

9.8CVSS8.2AI score0.97255EPSS
SaveExploits17
zdt
zdt
•added 2018/11/05 12:00 a.m.•503 views

blueimp jQuery Arbitrary File Upload Exploit

This Metasploit module exploits an arbitrary file upload in the sample PHP upload handler for blueimp's jQuery File Upload widget in versions 9.22.0 and below. Due to a default configuration in Apache 2.3.9+, the widget's .htaccess file may be disabled, enabling exploitation of this vulnerability...

0.1AI score0.97255EPSS
SaveExploits17
OpenVAS
OpenVAS
•added 2018/11/02 12:00 a.m.•364 views

Blueimp jQuery-File-Upload < 9.24.1 File Upload Vulnerability - Active Check

Blueimp jQuery-File-Upload is prone to a unauthenticated file upload vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

9.8CVSS9.5AI score0.97255EPSS
SaveExploits17References2
Check Point Advisories
Check Point Advisories
•added 2018/11/01 12:00 a.m.•107 views

Blueimp jQuery File Upload Remote Code Execution (CVE-2018-9206)

An arbitrary file upload vulnerability has been reported in Blueimp jQuery File Upload Plugin. The vulnerability is due to a fail to adequately sanitize user-supplied input. Successful exploitation of this vulnerability could result in arbitrary code execution...

7.5CVSS2.8AI score0.97255EPSS
SaveExploits17
Kitploit
Kitploit
•added 2018/10/29 8:39 p.m.•268 views

JQShell - A Weaponized Version Of CVE-2018-9206 (Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0)

JQShell A weaponized version of CVE-2018-9206 Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload = v9.22.0. Disclaimer Using this agianst servers you dont control, is illegal in most countries. The author claims no responsibility for the actions of those who use thi...

9.8CVSS9.6AI score0.97255EPSS
SaveExploits17References2
ThreatPost
ThreatPost
•added 2018/10/23 12:31 p.m.•767 views

Thousands of Applications Vulnerable to RCE via jQuery File Upload

A widely used plugin by Blueimp called jQuery File Upload contains a years-old vulnerability that potentially places 7,800 different software applications at risk for compromise and remote code-execution RCE. jQuery File Upload is a is a user-contributed open-source package for software developer...

7.5CVSS9.8AI score0.97255EPSS
SaveExploits17References4
OSV
OSV
•added 2018/10/22 6:53 p.m.•17 views

GHSA-4CJ8-G9CP-V5WR Unrestricted Upload of File with Dangerous Type in blueimp-file-upload

Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload = v9.22.0...

9.8CVSS7.3AI score0.97255EPSS
SaveExploits17References9
vulnersOsv
vulnersOsv
•added 2018/10/22 6:53 p.m.•6 views

@visiosoft/medium-editor-insert-plugin (>=2.4.1, <=2.4.3), ai-django-fileupload (0.1.15) +6 more potentially affected by CVE-2018-9206 via blueimp-file-upload (>=9.5.8, <=9.22.0)

blueimp-file-upload NPM version =9.5.8, =2.4.1, =0.12.0-beta.1, =2.3.0, =0.17.3, =0.1.3, =3.0.0-prerelease.20170216T120000Z, =3.1.0 Source cves: CVE-2018-9206 Source advisory: OSV:GHSA-4CJ8-G9CP-V5WR...

9.8CVSS8.4AI score0.97255EPSS
SaveExploits17
Github Security Blog
Github Security Blog
•added 2018/10/22 6:53 p.m.•69 views

Unrestricted Upload of File with Dangerous Type in blueimp-file-upload

Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload = v9.22.0...

9.8CVSS2.7AI score0.97255EPSS
SaveExploits17References9Affected Software1
Rows per page
Query Builder