CVE-2026-53649

Joro is a web exploitation framework by BishopFox. Prior to version 1.1.1 , its default proxy mode exposes a local API on 127.0.0.1:9090 with no authentication and a wildcard CORS policy . Because plugin uploads use the CORS-safelisted multipart/form-data content type, cross-origin JavaScript on ...

CVE-2026-53649 Joro: Unauthenticated Cross-Origin Plugin Upload Leads to RCE

Joro is a web exploitation framework. Prior to version 1.1.1, Joro's default proxy mode exposes a local API on 127.0.0.1:9090 that performs no authentication and applies a wildcard CORS policy. Because plugin uploads use the CORS-safelisted multipart/form-data content type, cross-origin JavaScrip...

PT-2021-17854

Name of the Vulnerable Software and Affected Versions: Vesta Control Panel versions through 0.9.8-27 myVesta versions through 0.9.8-26-39 Description: The issue allows uploads from a different origin due to a problem in the web/upload/UploadHandler.php file. Recommendations: For Vesta Control Pan...