CVE-2026-53691

An Unrestricted File Upload vulnerability in Redeight CMS version 1.0 allows authenticated attackers to achieve Remote Code Execution via the POST "/admin/index.php?module=pages&mode=FileAdd" endpoint. The application fails to validate file extensions and MIME types, permitting the upload of...

PT-2026-21426

A vulnerability was found in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /add student/ of the component Add Student Module. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-3783: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be...

PT-2024-16309

Name of the Vulnerable Software and Affected Versions The Media File Rename, Find Unused File, Add Alt text, Caption, Desc For Image SEO WordPress plugin versions prior to 1.5.0 Description The issue concerns the failure to sanitise uploaded SVG files, potentially allowing users with a role as lo...

CVE-2024-10482: Improper Neutralization of Input During Web Page Generation

The Media File Rename, Find Unused File, Add Alt text, Caption, Desc For Image SEO WordPress plugin before 1.5.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...

PT-2024-31512 · Byob · Byob

Name of the Vulnerable Software and Affected Versions: BYOB Build Your Own Botnet version 2.0 Description: An arbitrary file write issue in the exfiltration endpoint allows attackers to overwrite SQLite databases and bypass authentication via an unauthenticated HTTP request with a crafted...

CVE-2024-3369: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, has been found in code-projects Car Rental 1.0. Affected by this issue is some unknown functionality of the file add-vehicle.php. The manipulation of the argument Upload Image leads to unrestricted upload. The attack may be launched remotely. The...

WordPress Memphis Documents Library 3.9.19 Cross Site Request Forgery

Exploit Title: WordPress Plugin Memphis Documents Library 3.9.19 - Cross Site Request Forgery Arbitrary File Add Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: May 22, 2019 Software Link : https://wordpress.org/plugins/memphis-documents-library/ Tested Version...

UBUNTU-CVE-2017-6310

An issue was discovered in tnef before 1.4.13. Four type confusions have been identified in the fileaddmapiattrs function. These might lead to invalid read and write operations, controlled by an attacker...

DEBIAN-CVE-2017-6310

An issue was discovered in tnef before 1.4.13. Four type confusions have been identified in the fileaddmapiattrs function. These might lead to invalid read and write operations, controlled by an attacker...

Format Factory 2.95 Buffer Overflows

Title: ====== Format Factory v2.95 - Buffer Overflow Vulnerabilities Date: ===== 2012-05-02 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=536 http://www.vulnerability-lab.com/getcontent.php?id=539 VL-ID: ===== 536 Introduction: ============= Format Factory is a...