87272 matches found
CVE-2026-78245 itsourcecode Online Pharmacy System User Registration register.php move_uploaded_file unrestricted upload
A flaw has been found in itsourcecode Online Pharmacy System 1.0. This affects the function moveuploadedfile of the file allusers/register.php of the component User Registration. Executing a manipulation of the argument photo can lead to unrestricted upload. The attack may be launched remotely. T...
WordPress Drag and Drop Multiple File Upload for Contact Form 7 plugin < 1.3.9.9 - Unauthenticated RCE via Control Character Filename Bypass vulnerability
Unauthenticated RCE via Control Character Filename Bypass vulnerability discovered by Jakub Herman in WordPress Plugin Drag and Drop Multiple File Upload – Contact Form 7 versions 1.3.9.9...
Exploit for OS Command Injection in Tenable Security_Center
C...
CVE-2026-78202
A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function savesettings of the file adminclass.php. The manipulation of the argument img results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used...
CVE-2026-78251
DJI drones (15 models including Mavic 4 Pro, Air 3S, Mini 5 Pro, and others) expose an FTP service with hardcoded credentials shared across affected firmware versions. An attacker with access to the drone's internal network or USB RNDIS interface can upload unlimited files to /blackbox/upgrade/, ...
CVE-2026-78202 itsourcecode Payroll System admin_class.php save_settings unrestricted upload
A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function savesettings of the file adminclass.php. The manipulation of the argument img results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used...
EUVD-2026-64741
A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function savesettings of the file adminclass.php. The manipulation of the argument img results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used...
CVE-2026-78202
itsourcecode Payroll System 1.0 is affected by an unrestricted file upload vulnerability in the save_settings function of the file admin_class.php . The root cause is improper handling of the img argument, which allows a remote attacker to upload arbitrary files without authentication. The impact...
CVE-2026-78202 itsourcecode Payroll System admin_class.php save_settings unrestricted upload
A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function savesettings of the file adminclass.php. The manipulation of the argument img results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used...
CVE-2026-19852
NewSiteServer NSS developed by CyberTutor has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload arbitrary files, including malicious HTML files, thereby achieving effects similar to cross-site scripting...
CVE-2026-19852 CyberTutor｜NewSiteServer (NSS) - Arbitrary File Upload
NewSiteServer NSS developed by CyberTutor has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload arbitrary files, including malicious HTML files, thereby achieving effects similar to cross-site scripting...
EUVD-2026-64707
NewSiteServer NSS developed by CyberTutor has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload arbitrary files, including malicious HTML files, thereby achieving effects similar to cross-site scripting...
CVE-2026-19852
NewSiteServer (NSS) developed by CyberTutor is affected by an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload arbitrary files, including malicious HTML files, achieving effects similar to cross-site scripting (XSS) . The CVSS 3.1 base score is 6.1 (MEDIUM) , with ...
PT-2026-79812
NewSiteServer NSS developed by CyberTutor has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload arbitrary files, including malicious HTML files, thereby achieving effects similar to cross-site scripting...
PT-2026-79831
Name of the Vulnerable Software and Affected Versions itsourcecode Payroll System version 1.0 Description An unrestricted file upload issue exists in the save settings function within the admin class.php file. A remote attacker can exploit this by manipulating the img argument to upload arbitrary...
PT-2026-80802
Name of the Vulnerable Software and Affected Versions itsourcecode Online Pharmacy System version 1.0 Description An unrestricted file upload flaw exists in the User Registration component. A remote attacker can manipulate the photo argument within the move uploaded file function in the 'all...
PT-2026-80804
Unrestricted Upload of File with Dangerous Type in the company logo upload in Roskus Prospero Flow CRM before 5.15.13 allows an authenticated user holding the create company and update company permissions to execute arbitrary JavaScript in the application origin via an SVG document containing an...
PT-2026-81049
Subscriber Arbitrary File Upload in UltimateAI = 3.1.0 versions...
Elementor Pro 4.2.1 Unrestricted File Upload Checker
Elementor Pro version 4.2.1 and below contains an unrestricted file upload vulnerability caused by insufficient validation of uploaded file types. Under vulnerable configurations, an unauthenticated attacker may be able to upload dangerous files that can subsequently result in remote code executi...
