PT-2026-79037

A vulnerability was identified in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=save menu. The manipulation of the argument img leads to unrestricted upload. The attack is possible to be carried out remotely. T...

PT-2026-79088

An issue was discovered in vsDesk v14.0101. An authenticated attacker with administrative privileges can bypass client-side file validation in the "Import via CSV" component due to a lack of server-side validation. This allows the upload of an arbitrary file, which can lead to Remote Code Executi...

PT-2026-78991

Subscriber Arbitrary File Upload in Warehouse Cargo = 2.6.9 versions...

PT-2026-79041

Uncontrolled Resource Consumption vulnerability in Apache InLong. Users could affect operational configuration or allow upload of non-official packages. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick 1 to solve it. 1...

CVE-2026-15748

CVE-2026-15748 — Forminator Forms बिना प्रमाणीकरण के मनमाना फ़ाइल अपलोड → RCE CVSS 9.8 गंभीर · प्रभावित: Forminator = 1.56.1 · पैच किया गया: 1.56.2 शोधकर्ता: daroo Wordfence बग बाउंटी, $2,048 · 600k सक्रिय इंस्टॉल विश्लेषण:...

CVE-2026-1657

CVE-2026-1657: Caricamento File Arbitrario Non Autenticato nel Plugin EventPrime Disclaimer: Questo repository è stato creato solo a scopo educativo e per divulgazione etica. La vulnerabilità è stata segnalata responsabilmente al fornitore ed è stata corretta. Non utilizzare queste informazioni p...

CVE-2025-68001

CVE-2025-68001 WordPress g-FFL Checkout प्लगइन 📡 वक्र से आगे रहें। टेलीग्राम पर @KNxploited से जुड़ें — नवीनतम CVEs, zero-days, और अत्याधुनिक एक्सप्लॉइट रिसर्च का आपका विशेष स्रोत। लगातार अपडेट किया जाता है। सबके लिए नहीं। 📋 अवलोकन...

tpadmin-CVE-2026-2113-poc

tpadmin-CVE-2026-2113-poc एक प्रूफ-ऑफ-कॉन्सेप्ट जो मनमाना फ़ाइल अपलोड के माध्यम से वेब सर्वर विशेषाधिकारों के साथ रिमोट कोड निष्पादन का शोषण करता है। भेद्यता विवरण H-ui.admin सिस्टम के WebUploader पूर्वावलोकन घटक में एक महत्वपूर्ण रिमोट कोड निष्पादन भेद्यता मौजूद है।...

CVE-2026-7537

MDJM Event Management = 1.7.8.3 – Authentifizierter Administrator+ willkürlicher Datei-Upload über den Parameter „mdjmemailuploadfile“ Das WordPress-Plugin MDJM Event Management Version 1.7.8.3 und früher enthält eine Schwachstelle für willkürlichen Datei-Upload, die es authentifizierten...

CVE-2026-76393

In Splunk AI Toolkit versions below 6.0.0, a user who can upload models could overwrite a model being uploaded by another user by sending a concurrent upload request for the same model name, causing the resulting model lookup entry to reference attacker-controlled content. The race condition is...

CVE-2026-76369

In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outside the intended Automation Broker log directory. The vulnerability is possible because Automation Broker log uploads accept crafted filename input before writing log files. For more information see...

CVE-2025-8625

CVE-2025-8625 إضافة Copypress Rest API 1.1 - 1.2 - غياب سر JWT قابل للتهيئة والتحقق من نوع الملفات يؤدي إلى تنفيذ تعليمات برمجية عن بُعد دون مصادقة 🛡️ أداة استغلال ثغرة RCE في Copypress Rest API 1.1 - 1.2 📝 الوصف إن إضافة Copypress Rest API لـ WordPress الإصدارات من 1.1 إلى 1.2 معرضة لثغرة تنفيذ...

CVE-2026-63123

Tina is a headless content management system. Prior to 2.5.2, the TinaCMS CLI package's Vite dev server packages/@tinacms/cli/src/next/vite/cors.ts origin callback returns false for a disallowed origin but does not reject the request, and packages/@tinacms/cli/src/next/vite/plugins.ts still route...

CVE-2025-29009

CVE-2025-29009 Il plugin WordPress Medical Prescription Attachment per WooCommerce = 1.2.3 è vulnerabile a un caricamento arbitrario di file ad alta priorità. CVE-2025-29009 Webkul Medical Prescription Attachment — Caricamento di file senza restrizioni → Web Shell root@kitploit: ,-. . , ,--. ,-...

GHSA-RGR9-R7MJ-MF6X Tina: Cross-origin `POST /media/upload/*` requests can write arbitrary files into the Tina dev server media root

Summary A browser-based cross-origin request flaw in the Tina dev server allows an attacker-controlled website to cause arbitrary file creation inside the configured media upload directory on a developer machine running tinacms dev. No manual file upload is required. The attacker page builds the...

Tina: Cross-origin `POST /media/upload/*` requests can write arbitrary files into the Tina dev server media root

Summary A browser-based cross-origin request flaw in the Tina dev server allows an attacker-controlled website to cause arbitrary file creation inside the configured media upload directory on a developer machine running tinacms dev. No manual file upload is required. The attacker page builds the...

CVE-2026-63123 Tina: Cross-origin `POST /media/upload/*` requests can write arbitrary files into the Tina dev server media root

Tina is a headless content management system. Prior to 2.5.2, the TinaCMS CLI package's Vite dev server packages/@tinacms/cli/src/next/vite/cors.ts origin callback returns false for a disallowed origin but does not reject the request, and packages/@tinacms/cli/src/next/vite/plugins.ts still route...

EUVD-2026-62971

Tina is a headless content management system. Prior to 2.5.2, the TinaCMS CLI package's Vite dev server packages/@tinacms/cli/src/next/vite/cors.ts origin callback returns false for a disallowed origin but does not reject the request, and packages/@tinacms/cli/src/next/vite/plugins.ts still route...

CVE-2026-76393

CVE-2026-76393 is a race condition in Splunk AI Toolkit versions below 6.0.0 , occurring during model upload through the REST API . The root cause is that the toolkit does not verify that the uploaded content belongs to the request that creates the model lookup entry. An authenticated user who ca...

CVE-2026-76369 Path Traversal through Automation Broker in Splunk SOAR

In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outside the intended Automation Broker log directory. The vulnerability is possible because Automation Broker log uploads accept crafted filename input before writing log files. For more information see...