PanaceaSoft-0day-Exploit

PanaceaSoft-0day-Exploit PanaceaSoft all products 0day exploit https://packetstormsecurity.com/files/157869/PanaceaSoft-Shell-Upload.html no write-up read: jQuery File Upload's PHP Upload Handler...

Cisco-ASA-CVE-2025-20333-Scanner

CVE-2025-20333 Scanner A Python-based diagnostic scanner for Cisco ASA / FTD VPN Web Server Buffer Overflow CVE-2025-20333. CVE-2025-20333 is a critical heap-based buffer overflow vulnerability in the WebVPN file upload handler that can lead to remote code execution RCE as root when successfully...

CVE-2026-75494

Cudy TR3000 before 2.5.42 contains an argument injection vulnerability that allows a malicious or compromised ACS to inject curl options through unfiltered Username and Password values in the easycwmpd Upload handler. Attackers can embed whitespace to add options like -o and --url to the root-run...

EUVD-2026-125262

Cudy TR3000 before 2.5.42 contains an argument injection vulnerability that allows a malicious or compromised ACS to inject curl options through unfiltered Username and Password values in the easycwmpd Upload handler. Attackers can embed whitespace to add options like -o and --url to the root-run...

PT-2026-146798

Cudy TR3000 before 2.5.42 contains an argument injection vulnerability that allows a malicious or compromised ACS to inject curl options through unfiltered Username and Password values in the easycwmpd Upload handler. Attackers can embed whitespace to add options like -o and --url to the root-run...

CVE-2019-5096-GoAhead-Web-Server-Dos-Exploit

CVE-2019-5096 Use After Free Dos Exploit python TriggerDOS.py ip Vulnerability Analysis https://github.com/embedthis/goahead.git GoAhead GitHub link git diff the patch Key Code Analysis In the code, locate upload.c:370. It can be seen that before wp-currentFile=0 the following is executed: typede...

CVE-2026-111190

The ARForms plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 7.2.4 via its form file-upload handler. The name of the stored file is taken from an attacker-controlled request header and is not adequately restricted to safe file types, and the plugin...

EUVD-2026-123272

The ARForms plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 7.2.4 via its form file-upload handler. The name of the stored file is taken from an attacker-controlled request header and is not adequately restricted to safe file types, and the plugin...

CVE-2026-111190 ARForms <= 7.2.4 - Unauthenticated Arbitrary File Upload to Remote Code Execution via X-FILENAME Header

The ARForms plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 7.2.4 via its form file-upload handler. The name of the stored file is taken from an attacker-controlled request header and is not adequately restricted to safe file types, and the plugin...

CVE-2026-111190

The ARForms plugin for WordPress (versions up to and including 7.2.4 ) is vulnerable to an unauthenticated arbitrary file upload via its form file-upload handler. The root cause is that the plugin retrieves the stored filename from an attacker-controlled request header without sufficient restrict...

CVE-2026-111729

In Kura versions = 5.6.2, the "Command" file-upload handler at POST /admin/denali/file/command extracts a client-supplied ZIP archive into the configured command.working.directory. The path-containment check validateFileName compares canonical paths with String.startsWith without appending a...

CVE-2026-111729

In Kura versions = 5.6.2, the "Command" file-upload handler at "POST /admin/denali/file/command" extracts a client-supplied ZIP archive into the configured "command.working.directory". The path-containment check "validateFileName" compares canonical paths with "String.startsWith" without appendin...

EUVD-2026-121412

In Kura versions = 5.6.2, the "Command" file-upload handler at POST /admin/denali/file/command extracts a client-supplied ZIP archive into the configured command.working.directory. The path-containment check validateFileName compares canonical paths with String.startsWith without appending a...

CVE-2026-121995

A stack buffer overflow in the GDB client's tracepoint upload handler allows an attacker-controlled debug stub to corrupt stack memory automatically during connection setup. The overflow results from GDB reading beyond the current reply boundary into a stale prior reply in the shared packet buffe...

UBUNTU-CVE-2026-121995

A stack buffer overflow in the GDB client's tracepoint upload handler allows an attacker-controlled debug stub to corrupt stack memory automatically during connection setup. The overflow results from GDB reading beyond the current reply boundary into a stale prior reply in the shared packet buffe...

DEBIAN-CVE-2026-121995

A stack buffer overflow in the GDB client's tracepoint upload handler allows an attacker-controlled debug stub to corrupt stack memory automatically during connection setup. The overflow results from GDB reading beyond the current reply boundary into a stale prior reply in the shared packet buffe...

CVE-2026-121995

A stack buffer overflow in the GDB client's tracepoint upload handler allows an attacker-controlled debug stub to corrupt stack memory automatically during connection setup. The overflow results from GDB reading beyond the current reply boundary into a stale prior reply in the shared packet buffe...

AZL-113134 CVE-2026-121995 affecting package crash 9.0.0-3

A stack buffer overflow in the GDB client's tracepoint upload handler allows an attacker-controlled debug stub to corrupt stack memory automatically during connection setup. The overflow results from GDB reading beyond the current reply boundary into a stale prior reply in the shared packet buffe...

AZL-113155 CVE-2026-121995 affecting package gdb 13.2-11

A stack buffer overflow in the GDB client's tracepoint upload handler allows an attacker-controlled debug stub to corrupt stack memory automatically during connection setup. The overflow results from GDB reading beyond the current reply boundary into a stale prior reply in the shared packet buffe...

CVE-2026-121995

The GDB client contains a stack buffer overflow in its tracepoint upload handler . The vulnerability occurs when GDB reads beyond the current reply boundary into a stale prior reply within a shared packet buffer. This allows an attacker-controlled debug stub to corrupt stack memory automatically ...