Lucene search
+L

1935 matches found

Kitploit
Kitploit
added 2026/09/13 10:50 a.m.9 views

Pixel-Flood-Attack

Pixel Flood DoS - CVE-2024-22393 PoC 针对Web服务器的Pixel Flood漏洞 一个轻量级的概念验证,用于测试运行受影响版本Apache Answer的Web应用程序中的Pixel Flood内存耗尽漏洞。 目录 描述 技术细节 受影响版本 环境要求 使用说明 PoC步骤 检测 缓解措施 漏洞赏金提示 参考 免责声明 描述 本仓库包含CVE-2024-22393 的概念验证,这是Apache Answer(版本至1.2.1)中的一个严重漏洞,允许经过身份验证的攻击者使用精心制作的图像文件使服务器崩溃。该攻击也被称为“Pixel...

9.1CVSS8AI score0.02459EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 2:53 p.m.14 views

RISE-Ultimate_Project_Manager_e_CRM

CVE-2025-3855 - RISE Ultimate Project Manager - IDOR Vulnerabilidad de seguridad: IDOR Referencia Directa Insegura a Objetos Componente afectado: endpoint de carga de imagen de perfil, controlador teammembers Software: RISE - Ultimate Project Manager & CRM Vendor: codecanyon Versión: 3.8.2 CVE OR...

5.3CVSS5.7AI score0.00481EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 6:02 p.m.5 views

CVE-2024-36057

CVE-2024-36057 — Koha Library Software ID CVE: CVE-2024-36057 Producto: Koha Library Software Tipo de Vulnerabilidad: Inyección de Comandos del Sistema Operativo CWE-78 Puntuación CVSS: 8.7 Alta Autenticado Versiones Afectadas: Inferiores a 22.05.22 Créditos: Karolis Narvilas Descripción Koha es ...

9.8CVSS6.6AI score0.01803EPSS
SaveExploits1
NVD
NVD
added 2026/09/09 2:17 p.m.5 views

CVE-2026-86749

Snipe-IT versions put... call still caused the application to delete the previous image via deleteExistingImage and to reassign and persist the model's image reference to the new filename, destroying the existing image and leaving the database row pointing at a file that was never written. A mirr...

7CVSS0.00234EPSS
SaveExploits1References2
CVE
CVE
added 2026/09/09 1:32 p.m.8 views

CVE-2026-86749

Snipe-IT versions up to 8.6.3 contain a data-loss flaw in ImageUploadRequest::handleImages() . The application does not check the return value of Storage::disk('public')->put() or Storage::delete() , so when a storage backend transiently fails (e.g., an S3 network error, filesystem permission ...

7CVSS5.6AI score0.00234EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2026/09/09 1:32 p.m.9 views

CVE-2026-86749 snipe-it before 8.7.0 Data Loss via Failed Image Write

Snipe-IT versions put... call still caused the application to delete the previous image via deleteExistingImage and to reassign and persist the model's image reference to the new filename, destroying the existing image and leaving the database row pointing at a file that was never written. A mirr...

7CVSS5.6AI score
SaveExploits0References4
EUVD
EUVD
added 2026/09/09 1:32 p.m.7 views

EUVD-2026-74926

Snipe-IT versions put... call still caused the application to delete the previous image via deleteExistingImage and to reassign and persist the model's image reference to the new filename, destroying the existing image and leaving the database row pointing at a file that was never written. A mirr...

7CVSS5.6AI score0.00234EPSS
SaveExploits1References2
NVD
NVD
added 2026/09/08 9:18 p.m.6 views

CVE-2026-78741

Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS in the wysiwyg-CKEditor image upload feature...

6.1CVSS0.00181EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 12:00 a.m.5 views

EUVD-2026-74260

Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS in the wysiwyg-CKEditor image upload feature...

5.7AI score0.00181EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/08 12:00 a.m.24 views

CVE-2026-78741

Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS in the wysiwyg-CKEditor image upload feature...

0.00181EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 12:00 a.m.8 views

CVE-2026-78741

Silverpeas Core versions up to 6.4.6 are affected by a Cross-Site Scripting (XSS) vulnerability in the wysiwyg-CKEditor image upload feature. The flaw allows an unauthenticated remote attacker, with user interaction, to inject malicious scripts via the image upload mechanism, resulting in a chang...

6.1CVSS5.7AI score0.00181EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/01 12:00 a.m.8 views

EUVD-2026-69416

An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...

6.2AI score0.00419EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/01 12:00 a.m.14 views

CVE-2026-51974

An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...

8.8CVSS6.2AI score
SaveExploits0References5
NVD
NVD
added 2026/08/31 9:17 p.m.8 views

CVE-2026-54179

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.37, the src/app/Library/Uploaders/SingleBase64Image.php methods SingleBase64Image::uploadFiles and...

4.4CVSS0.00203EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/08/31 7:53 p.m.18 views

EUVD-2026-43671

TYPO3 CMS - Unrestricted File Upload in Form Framework...

6.3CVSS5.8AI score0.00254EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/29 12:00 a.m.20 views

PT-2026-83429

Name of the Vulnerable Software and Affected Versions BookStack versions prior to 26.05.4 Description An authenticated remote code execution issue exists in the portable ZIP import functionality. Users possessing both Import Content and Create Books permissions can upload a PHP-image polyglot...

8.8CVSS6.4AI score0.00572EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2026/08/27 7:00 p.m.17 views

CVE-2026-18886 Unauthenticated Privilege Escalation via System Configuration Image Upload Processor

ServiceNow has remediated an improper access control vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to create or modify instance data beyond what was intended, resulting in privilege escalation. ...

10CVSS6.1AI score0.00247EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/27 7:00 p.m.150 views

CVE-2026-18886

CVE-2026-18886 is an improper access control vulnerability in the ServiceNow AI platform , specifically in the System Configuration Image Upload Processor . An unauthenticated user can, in certain circumstances, create or modify instance data beyond intended scope, leading to privilege escalation...

10CVSS5.4AI score0.00247EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/27 7:00 p.m.105 views

CVE-2026-18886 Unauthenticated Privilege Escalation via System Configuration Image Upload Processor

ServiceNow has remediated an improper access control vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to create or modify instance data beyond what was intended, resulting in privilege escalation. ...

10CVSS0.00247EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/22 12:16 p.m.14 views

CVE-2026-66917

Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in every visitor's browser...

8.6CVSS0.00466EPSS
SaveExploits1References1
Rows per page
Query Builder