1202 matches found
cve-2014-0050
cve-2014-0050 Sitio web vulnerable a CVE-2014-0050 Este proyecto tiene como objetivo demostrar la explotación de CVE-2014-0050 con fines educativos. Para más información, consulte: https://www.trustwave.com/Resources/SpiderLabs-Blog/CVE-2014-0050--Exploit-with-Boundaries,-Loops-without-Boundaries...
WordPress Contact Form 7 <1.3.3.3 - Remote Code Execution
WordPress Contact Form 7 before 1.3.3.3 allows unrestricted file upload and remote code execution by setting supportedtype to php% and uploading a .php% file. id: CVE-2020-12800 info: name: WordPress Contact Form 7 1.3.3.3 - Remote Code Execution author: dwisiswant0 severity: critical description...
Simple Employee Records System 1.0 - Unrestricted File Upload
Simple Employee Records System 1.0 contains an arbitrary file upload vulnerability due to client-side validation of file extensions. This can be used to upload executable code to the server to obtain access or perform remote command execution. id: CVE-2019-20183 info: name: Simple Employee Record...
Elementor Website Builder - Remote Code Execution
The Elementor Website Builder plugin for WordPress versions 3.6.0 to 3.6.2 are vulnerable to unauthorized execution of several AJAX actions due to a missing capability check in the /core/app/modules/onboarding/module.php file. This makes it possible for attackers to modify site data and upload...
ShowDoc - Remote Code Execution
The open-source API documentation tool ShowDoc had a remote code execution vulnerability before version 2.8.7 This vulnerability allowed unauthenticated remote attackers to upload .php files because the image upload function was not authenticated and the file extension validation was improper. id...
Apache Flink 1.5.1 - Local File Inclusion
Apache Flink 1.5.1 is vulnerable to local file inclusion because of a REST handler that allows file uploads to an arbitrary location on the local file system through a maliciously modified HTTP HEADER. id: CVE-2020-17518 info: name: Apache Flink 1.5.1 - Local File Inclusion author: pdteam severit...
CVE-2022-29464
CVE-2022-29464 WSO2 RCE CVE-2022-29464 のエクスプロイトと解説。 詳細 CVE-2022-29464 は、Orange Tsai によって発見されたWSO2の重大な脆弱性です。この脆弱性は、認証されていない無制限の任意ファイルアップロードであり、認証されていない攻撃者が悪意のあるJSPファイルをアップロードすることでWSO2サーバー上でRCEを獲得することを可能にします。 脆弱なアップロードルートは /fileupload であり、これは FileUploadServlet サーブレットによって処理されます。また、indentity.xml...
Atom CMS v2.0 - Remote Code Execution
Atom CMS v2.0 was discovered to contain a remote code execution RCE vulnerability via /admin/uploads.php. id: CVE-2022-25487 info: name: Atom CMS v2.0 - Remote Code Execution author: theamanrawat severity: critical description: | Atom CMS v2.0 was discovered to contain a remote code execution RCE...
Joomla! Component GMapFP 3.5 - Arbitrary File Upload
Joomla! Component GMapFP 3.5 is vulnerable to arbitrary file upload vulnerabilities. An attacker can access the upload function of the application without authentication and can upload files because of unrestricted file upload which can be bypassed by changing Content-Type & name file too double...
CVE-2026-25732-NiceGUI-3.6.1
作者： Mohammed Idrees Banyamer 联系方式： Instagram：@banyamersecurity GitHub：https://github.com/mbanyamer CVE-2026-25732 — NiceGUI FileUpload 路径遍历 → 任意文件写入 漏洞利用标题： NiceGUI FileUpload 路径遍历导致任意文件写入 日期： 2025-06-06 测试环境： NiceGUI ≤ 3.6.1（Linux / Windows 上的 Python 3.8 – 3.12） 修复版本： NiceGUI 3.7.0 CVE：...
VMware View Planner <4.6 SP1- Remote Code Execution
VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability due to improper input validation and lack of authorization leading to arbitrary file upload in logupload web application. An unauthorized attacker with network access to View Planner Harness could...
Apache Tomcat Servers - Remote Code Execution
Apache Tomcat servers 7.0.0 to 79 are susceptible to remote code execution. By design, you are not allowed to upload JSP files via the PUT method. This is likely a security measure to prevent an attacker from uploading a JSP shell and gaining remote code execution on the server. However, due to t...
CVE-2026-95140
The software kkFileView versions v5.0.0 through v5.0.2 is vulnerable to a directory traversal vulnerability located in FileController.java . The fileUpload, createFolder, and existsFile endpoints accept a path parameter that is concatenated into the upload base path without sufficient validation....
EUVD-2026-93551
kkFileView v5.0.0 through v5.0.2 contains a directory traversal vulnerability in FileController.java. The fileUpload, createFolder and existsFile endpoints accept a "path" parameter that is concatenated into the upload base path without validation, allowing unauthenticated attackers to create...
PT-2026-107257
Five more CVE IDs are in. MITRE assigned CVE-2026-95248 and CVE-2026-95250 through CVE-2026-95253 to five findings we published in batch 11 — SCADA/HMI, graph analytics, document viewing and data-centre console management. All five were found, verified and disclosed by our AI-driven research...
PT-2026-107258
Five more CVE IDs are in. MITRE assigned CVE-2026-95248 and CVE-2026-95250 through CVE-2026-95253 to five findings we published in batch 11 — SCADA/HMI, graph analytics, document viewing and data-centre console management. All five were found, verified and disclosed by our AI-driven research...
CVE-2026-95140
kkFileView v5.0.0 through v5.0.2 contains a directory traversal vulnerability in FileController.java. The fileUpload, createFolder and existsFile endpoints accept a "path" parameter that is concatenated into the upload base path without validation, allowing unauthenticated attackers to create...
CVE-2023-24998
当未定义 multipartResolver 或注册了 StandardServletMultipartResolver 时 使用 Tomcat 内部包中的 FileUpload 此时 Tomcat 版本必须大于 9.0.71 spring boot 2.7.8 Tomcat 的 maxParameterCountDefault: 10000 设置会被注入到 FileUpload.setFileCountMax 中 不使用 Apache Commons Fileupload 依赖 当将 multipartResolver 注册为 CommonsMultipartResolver 时 必须...
ACEDcup
ACEDcup ACEDcupツールは、Javaバイナリデシリアライゼーション攻撃（ACED）のためのペイロードジェネレーターです。 Apache Commons FileUpload ver = 1.3（CVE-2013-2186）およびOracle JDK ver 7u40 を対象としています。 この攻撃は、ライブラリまたはJavaの新しいバージョンでも機能します。任意のコンテンツを任意のディレクトリにアップロードできますが、 この状況ではファイル名を制御できません（例:...