72287 matches found
EUVD-2026-58555
A vulnerability has been found in DTStack Taier 1.4.0. Affected is the function MultipartFile.getOriginalFilename of the file UploadController.java of the component Upload Controller. The manipulation of the argument File leads to path traversal. The attack may be initiated remotely. Upgrading to...
CVE-2026-19761
A vulnerability has been found in DTStack Taier 1.4.0. Affected is the function MultipartFile.getOriginalFilename of the file UploadController.java of the component Upload Controller. The manipulation of the argument File leads to path traversal. The attack may be initiated remotely. Upgrading to...
CVE-2026-19757
A vulnerability was found in Dromara lamp-cloud up to 5.10.0. This vulnerability affects unknown code of the file FileAnyoneController.java of the component File-Upload Controller. Performing a manipulation of the argument bucket/bizType results in path traversal. The attack can be initiated...
EUVD-2026-58549
luci-app-openvpn fails to properly validate the instancename2 parameter during file upload, allowing authenticated users to perform path traversal and write arbitrary files outside the intended directory. Attackers can upload malicious payloads to gain persistent root code execution by placing SS...
PT-2026-72050
Name of the Vulnerable Software and Affected Versions SourceCodester Simple Doctors Appointment System version 1.0 Description An unrestricted upload issue exists in the /save file.php endpoint within the save doctor function. This flaw allows a remote attacker to upload files without proper...
PT-2026-72046
Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution...
PT-2026-72052
Name of the Vulnerable Software and Affected Versions Dell Wyse Management Suite WMS versions prior to 2605.0.2 Description An unrestricted upload of file with dangerous type allows a high privileged attacker with remote access to potentially achieve Remote Code Execution RCE, which is the abilit...
PT-2026-72079
An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system...
PT-2026-71974
Name of the Vulnerable Software and Affected Versions WordPress versions prior to 7.0.4 Description An authenticated user with Author level privileges or higher can achieve remote code execution by uploading a malicious Postscript file. This issue occurs when the server utilizes Imagick and...
CVE-2026-19761
CVE-2026-19761 affects DTStack Taier 1.4.0. The vulnerability resides in Upload Controller’s UploadController.java, specifically MultipartFile.getOriginalFilename, where manipulation of the File argument enables path traversal. The issue can be triggered remotely. Upgrading to DTStack Taier 1.5.0...
CVE-2026-19761 DTStack Taier Upload Controller UploadController.java MultipartFile.getOriginalFilename path traversal
A vulnerability has been found in DTStack Taier 1.4.0. Affected is the function MultipartFile.getOriginalFilename of the file UploadController.java of the component Upload Controller. The manipulation of the argument File leads to path traversal. The attack may be initiated remotely. Upgrading to...
CVE-2026-19757
A vulnerability was found in Dromara lamp-cloud up to 5.10.0. This vulnerability affects unknown code of the file FileAnyoneController.java of the component File-Upload Controller. Performing a manipulation of the argument bucket/bizType results in path traversal. The attack can be initiated...
CVE-2026-19757 Dromara lamp-cloud File-Upload Controller FileAnyoneController.java path traversal
A vulnerability was found in Dromara lamp-cloud up to 5.10.0. This vulnerability affects unknown code of the file FileAnyoneController.java of the component File-Upload Controller. Performing a manipulation of the argument bucket/bizType results in path traversal. The attack can be initiated...
CVE-2026-19757
CVE-2026-19757 affects Dromara lamp-cloud up to version 5.10.0, specifically the File-Upload Controller FileAnyoneController.java. The vulnerability arises from manipulation of the bucket/bizType argument, enabling path traversal. Exploitation is remote and an exploit has been made public. The de...
CVE-2026-19757 Dromara lamp-cloud File-Upload Controller FileAnyoneController.java path traversal
A vulnerability was found in Dromara lamp-cloud up to 5.10.0. This vulnerability affects unknown code of the file FileAnyoneController.java of the component File-Upload Controller. Performing a manipulation of the argument bucket/bizType results in path traversal. The attack can be initiated...
EUVD-2026-58287
The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplied inside the model, without validating that the offset stays within the bounds of the underlying storage. A user with th...
CVE-2026-72642
The CVE notes a flaw in Elasticsearch’s native ML inference where a model operation computes a memory address from an offset without bounds checking, enabling heap corruption that can crash the inference process and potentially allow arbitrary code execution within that process. Affected configur...
CVE-2026-72642 Use of Out-of-range Pointer Offset in the Elasticsearch Machine Learning Native Inference Process
The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplied inside the model, without validating that the offset stays within the bounds of the underlying storage. A user with th...