PrestaShop < 1.7.6.6 - Information Exposure via Upload Directory

PrestaShop versions after 1.5.0.0 and before 1.7.6.6 are vulnerable to information exposure through directory listing in the upload directory due to a missing index.php file. id: CVE-2020-15081 info: name: PrestaShop 1.7.6.6 - Information Exposure via Upload Directory author: 0xAkoko severity: lo...

CVE-2015-6668

CVE-2015-6668 - Job Manager IDOR Un petit CLI Rust qui reproduit le modèle de divulgation d'informations associé à CVE-2015-6668 Job Manager //filename.ext. Modèle d'attaque : forcer brutalement / énumérer les dossiers d'année/mois courants et les variantes de noms de fichiers pour localiser les...

CVE-2026-19264

CVE-2026-19264 - Postiz의 인증되지 않은 경로 탐색을 통한 전체 인스턴스 장악 작성자: Krithik Babu P @DarkLycn1976 게시일: 2026-08-10 CVE: CVE-2026-19264 심각도: 치명적Critical - CVSS 4.0 9.3 / CVSS 3.1 9.8 CWE: CWE-22 - 경로명을 제한된 디렉터리로 제한하지 못함 영향받는 버전: gitroomhq/postiz-app 2.22.1 수정 버전: v2.22.1 TL;DR Postiz는 로컬에 저장된 미디어를 업로드 디렉터리에...

CVE-2023-2825-PoC

CVE-2023-2825-PoC Preuve de concept pour CVE-2023-2825, une vulnérabilité de lecture arbitraire de fichier dans GitLab CE/EE 16.0.0. Le script se connecte avec un compte GitLab valide, crée la structure de groupe public imbriqué requise, crée un projet public, télécharge une pièce jointe et utili...

CVE-2025-70559

cambia la directory di upload nello script python python3 exploit.py LHOST LPORT...

CVE-2026-16054

CVE-2026-16054 affects the Drag and Drop Multiple File Upload for WooCommerce WordPress plugin prior to 1.1.8. The issue permits unauthenticated users to obtain a valid nonce that gates the plugin’s file-deletion routine, enabling anonymous attackers to delete files staged in the upload directory...

EUVD-2026-53722

The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.8 does not prevent unauthenticated users from obtaining a valid nonce that is the only control gating its file-deletion routine, allowing anonymous attackers to delete files staged in its upload directory and...

Tianwen-ERP-Upload-PoC

Tianwen Property ERP — Unauthenticated File Upload CVE: P...

CVE-2026-52680

Apache Kyuubi REST batch multipart upload handling uses the client-supplied multipart filename when creating a temporary uploaded resource. A remote attacker who can access the REST batch upload endpoint can provide path traversal sequences in the filename and cause the Kyuubi server process to...

CVE-2026-52680 Apache Kyuubi: REST batch multipart upload path traversal allows controlled file write

Apache Kyuubi REST batch multipart upload handling uses the client-supplied multipart filename when creating a temporary uploaded resource. A remote attacker who can access the REST batch upload endpoint can provide path traversal sequences in the filename and cause the Kyuubi server process to...

EUVD-2026-51185

Apache Kyuubi REST batch multipart upload handling uses the client-supplied multipart filename when creating a temporary uploaded resource. A remote attacker who can access the REST batch upload endpoint can provide path traversal sequences in the filename and cause the Kyuubi server process to...

CVE-2026-52680

Affected software: Apache Kyuubi REST batch multipart upload feature. Vulnerability: path traversal via client-supplied multipart filename used when creating temporary uploaded resources, enabling writing content outside the intended upload directory depending on filesystem permissions. Impact: p...

CVE-2026-15012 Demi <= 0.0.8 - Unauthenticated Information Exposure to Arbitrary Directory Copy

The Demi – One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory Copy in all versions up to, and including, 0.0.8 via the handlerestorestep function. This is due to missing HTTP access controls on the wp-content/uploads/demi-backup-state/...

CVE-2026-55474

Snipe-IT is an IT asset/license management system. Prior to 8.5.0, ActionlogController::displaySig concatenates the route filename parameter into a private upload-directory path without sanitization, allowing an authenticated attacker to traverse outside the intended directory and read arbitrary...

CVE-2026-55474 Snipe-IT: Directory traversal in displaySig

Snipe-IT is an IT asset/license management system. Prior to 8.5.0, ActionlogController::displaySig concatenates the route filename parameter into a private upload-directory path without sanitization, allowing an authenticated attacker to traverse outside the intended directory and read arbitrary...

CVE-2026-55474

Snipe-IT (IT asset/license management) is affected by a directory-traversal in ActionlogController::displaySig prior to version 8.5.0. The route filename parameter is concatenated into a private upload-directory path without sanitization, enabling an authenticated attacker to read arbitrary files...

PYSEC-2026-1852 Python-Multipart has Arbitrary File Write via Non-Default Configuration

Summary A Path Traversal vulnerability exists when using non-default configuration options UPLOADDIR and UPLOADKEEPFILENAME=True. An attacker can write uploaded files to arbitrary locations on the filesystem by crafting a malicious filename. Details When UPLOADDIR is set and UPLOADKEEPFILENAME is...

CVE-2026-5524

The Divi Form Builder plugin for WordPress (versions up to and including 5.1.8) is vulnerable to Unauthenticated Arbitrary File Upload leading to Remote Code Execution. The root cause is insufficient file extension validation in the do_image_upload() function where user-supplied input from accept...

CodeIgniter4 has a validation bypass when uploading file extensions via `ext_in` rule

Impact The extin upload validation rule checked the MIME-derived guessed extension instead of the client-provided filename extension. As a result, an uploaded file named shell.php containing GIF-like content could pass validation such as:...

Arbitrary File Upload

Overview codeigniter4/framework is a PHP full-stack web framework that is light, fast, flexible, and secure. Affected versions of this package are vulnerable to Arbitrary File Upload in the extin validation process for file uploads. An attacker can execute arbitrary code by uploading a file with ...