CVE-2025-8889

عنوان الاستغلال: إضافة WordPress Compress Then Upload الإصدار 1.0.3 - رفع ملف تعسفي يؤدي إلى تنفيذ أوامر عن بعد RCE التاريخ: 2025-07-23 مؤلف الاستغلال: محمد جليك الصفحة الرئيسية للبائع: https://wordpress.com/plugins/compress-then-upload رابط البرنامج:...

CVE-2025-61506

تم اكتشاف ثغرة في MediaCrush حتى الإصدار 1.0.1 تسمح للمهاجمين غير المصادقين عن بُعد برفع ملفات عشوائية بأي حجم إلى نقطة النهاية /upload. الثغرة: رفع ملفات غير مقيد CWE-434 معرف CVE: CVE-2025-61506 تاريخ الاكتشاف: 18 سبتمبر تاريخ التعيين: 9 أكتوبر المكون المتأثر: mediacrush/upload.py, app.py نقطة...

CiscoISE-CVE-2025-20282-POC

Cisco ISE CVE 2025-20282 Доказательство концепции Writeup: https://riversecurity.eu/like-stealing-cisco-ise-cream-from-a-kid-weaponizing-a-cve/ Python-скрипт злоупотребляет функцией загрузки, доступной без аутентификации по пути /admin/files-upload/ Скрипт локально создает папку bin и файл с имен...

CVE-2026-5027

Cet article est une publication de recherche par EQSTLab. Merci àYahia Hamza qui a signalé et analysé cette vulnérabilité. CVE-2026-5027 ★ CVE-2026-5027 Langflow traversée de chemin / écriture arbitraire de fichier PoC ★ Description CVE-2026-5027 : Vulnérabilité d'écriture arbitraire de fichier...

PT-2026-84863

Name of the Vulnerable Software and Affected Versions UnoPim versions prior to 2.1.5 Description Authenticated administrators can upload arbitrary PHP files through the TinyMCE image upload endpoint because the system fails to validate file extensions and MIME types. This allows an attacker to...

CVE-2026-34213

CVE-2026-34213 يمكن لمستخدم Docmost ذي صلاحيات منخفضة توفير attachmentId خاص بالضحية إلى نقطة نهاية التحميل العامة والكتابة فوق مرفق مخزّن في صفحة أخرى داخل نفس مساحة العمل. مقدمة لقد حددت وكشفت بشكل مسؤول وأعدت إنتاج ثغرة في التفويض عالية الخطورة في Docmost ، منصة التوثيق التعاوني مفتوحة المصدر...

CVE-2026-55419

Reachy Mini (an SDK by Pollen Robotics for controlling Reachy Mini robots) prior to 1.8.2 exposes the /api/media/sounds/upload endpoint without authentication, file-extension checks, content validation, or size validation. The daemon binds to 0.0.0.0 by default and uses permissive CORS (allow_ori...

CVE-2026-79670

Ech0 before 4.4.3 contains a stored cross-site scripting (XSS) vulnerability in its file upload endpoint . The root cause is that the endpoint validates the Content-Type header using only client-supplied values without performing server-side inspection of the uploaded file. An attacker with admin...

CVE-2026-67925

Cross Site Scripting vulnerability in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the endpoint /airag/chat/upload...

EUVD-2026-60536

Cross Site Scripting vulnerability in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the endpoint /airag/chat/upload...

CVE-2026-19927

A vulnerability was found in OpenBoxes up to 0.9.7. The impacted element is the function Upload of the file grails-app/controllers/org/pih/warehouse/product/ProductController.groovy of the component Product Upload Endpoint. Performing a manipulation of the argument params.url results in server-si...

CVE-2026-19927

CVE-2026-19927 affects OpenBoxes up to 0.9.7, specifically the Upload endpoint in grails-app/controllers/org/pih/warehouse/product/ProductController.groovy. The issue arises from manipulating the argument params.url, enabling a server-side request forgery (SSRF) that can be exploited remotely. Ex...

CVE-2026-19927 OpenBoxes Product Upload Endpoint ProductController.groovy upload server-side request forgery

A vulnerability was found in OpenBoxes up to 0.9.7. The impacted element is the function Upload of the file grails-app/controllers/org/pih/warehouse/product/ProductController.groovy of the component Product Upload Endpoint. Performing a manipulation of the argument params.url results in server-si...

CVE-2026-73034 DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header

DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers to write arbitrary files to any location on the server by injecting directory traversal sequences into the userid HTTP header of the Python file-upload endpoint. Attackers can send a crafted...

CVE-2026-72557

An unrestricted file upload vulnerability in Cockpit CMS 2.6.0 allows authenticated users to upload files of any extension including PHP scripts via the asset upload endpoint. The alloweduploads configuration defaults to wildcard and uploaded files are stored in a web-accessible directory. An...

CVE-2026-72576

A stored cross-site scripting XSS vulnerability in Bludit 4.0.0-beta allows a low-privileged authenticated user Author role to inject arbitrary JavaScript by uploading a crafted SVG file as the site logo. A stored script tag in the SVG executes in the browser of any user who loads the logo...

CVE-2026-72576

A stored cross-site scripting XSS vulnerability in Bludit 4.0.0-beta allows a low-privileged authenticated user Author role to inject arbitrary JavaScript by uploading a crafted SVG file as the site logo. A stored script tag in the SVG executes in the browser of any user who loads the logo...

CVE-2026-72576 Bludit - Stored Cross-Site Scripting via Malicious SVG Logo Upload

A stored cross-site scripting XSS vulnerability in Bludit 4.0.0-beta allows a low-privileged authenticated user Author role to inject arbitrary JavaScript by uploading a crafted SVG file as the site logo. A stored script tag in the SVG executes in the browser of any user who loads the logo...

CVE-2026-19383

A security vulnerability has been detected in saithink/saigroup SaiAdmin up to 5.0.1. This impacts the function shellexec of the file /app/saipackage/install/upload of the component Plugin Upload Endpoint. The manipulation leads to unrestricted upload. Remote exploitation of the attack is possibl...

EUVD-2026-54982

A security vulnerability has been detected in saithink/saigroup SaiAdmin up to 5.0.1. This impacts the function shellexec of the file /app/saipackage/install/upload of the component Plugin Upload Endpoint. The manipulation leads to unrestricted upload. Remote exploitation of the attack is possibl...