CVE-2026-72583 fastschema - Stored Cross-Site Scripting via MIME Type Bypass in File Upload

A stored cross-site scripting XSS vulnerability in fastschema through v0.15.1 allows a low-privileged authenticated user to upload an SVG file containing malicious JavaScript by bypassing the MIME type allow-list check...

EUVD-2026-55230

A stored cross-site scripting XSS vulnerability in Bludit 4.0.0-beta allows a low-privileged authenticated user Author role to inject arbitrary JavaScript by uploading a crafted SVG file as the site logo. A stored script tag in the SVG executes in the browser of any user who loads the logo...

CVE-2026-72576

CVE-2026-72576 : Bludit 4.0.0-beta contains a stored XSS vulnerability exploitable by a low-privileged authenticated user (Author) who uploads a crafted SVG as the site logo. The flaw resides in the /admin/ajax/logo-upload.php path, which moves the uploaded file directly to the web root via Files...

CVE-2026-72576

A stored cross-site scripting XSS vulnerability in Bludit 4.0.0-beta allows a low-privileged authenticated user Author role to inject arbitrary JavaScript by uploading a crafted SVG file as the site logo. A stored script tag in the SVG executes in the browser of any user who loads the logo...

CVE-2026-72576 Bludit - Stored Cross-Site Scripting via Malicious SVG Logo Upload

A stored cross-site scripting XSS vulnerability in Bludit 4.0.0-beta allows a low-privileged authenticated user Author role to inject arbitrary JavaScript by uploading a crafted SVG file as the site logo. A stored script tag in the SVG executes in the browser of any user who loads the logo...

CVE-2026-72570 cube-root directory-serve - Stored Cross-Site Scripting via Malicious Filename

A stored cross-site scripting XSS vulnerability in cube-root/directory-serve through 1.3.7 allows an attacker to inject arbitrary JavaScript into the web interface by uploading a file with a crafted filename containing HTML attribute-breaking characters...

Exploit for CVE-2026-19264

!CVE-2026-19264 - Unauthenticated Path Traversal to Full Instan...

CVE-2026-19089

The Product Input Fields for WooCommerce WordPress plugin before 2.0.2 does not validate uploaded file types when its accepted-types setting is left empty, which its own documentation advertises as accepting all files, allowing unauthenticated attackers to upload arbitrary files and achieve remot...

CVE-2026-16985

The Squeeze WordPress plugin before 1.7.12 does not validate the file type or extension of the per-size image data written by one of its attachment-update actions, allowing users with the uploadfiles capability Author and above to write an executable PHP file into the uploads directory and achiev...

SolarWinds Storage Manager - ProcessFileUpload Detection

Detects unauthenticated JSP upload via /images/../jsp/ProcessFileUpload.jsp path traversal auth filter bypass. !/usr/bin/env python3 -- coding: utf-8 -- """SolarWinds Storage Manager ProcessFileUpload.jsp auth bypass upload.""" from kittysploit import from lib.protocols.http.httpclient import...

TikiWiki - jhot.php Upload Detection (CVE-2006-4602)

Detects CVE-2006-4602 by uploading a PHP file via /jhot.php and verifying phpinfo under /img/wiki/. !/usr/bin/env python3 -- coding: utf-8 -- """TikiWiki jhot.php arbitrary PHP upload CVE-2006-4602.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanne...

libupnp - Unauth POST Write Detection (CVE-2016-6255)

Detects CVE-2016-6255 by POSTing a test file to the web root and retrieving it. !/usr/bin/env python3 -- coding: utf-8 -- """libupnp unauthenticated POST write CVE-2016-6255.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

OpenCart - FCKeditor Connector Arbitrary Upload Detection

Detects OpenCart = 1.3.2 FCKeditor connector upload by uploading a marker file. !/usr/bin/env python3 -- coding: utf-8 -- """Detects OpenCart = 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OpenCart -...

TCExam - Unauthenticated File Upload RCE (CVE-2010-2153)

Exploits CVE-2010-2153 by uploading a PHP shell via tcefunctionstcecodeeditor.php into /cache/. !/usr/bin/env python3 -- coding: utf-8 -- """TCExam unauthenticated upload RCE CVE-2010-2153.""" import re from random import randint from kittysploit import from lib.protocols.http.httpclient import...

FreePBX - Music Upload Filename RCE

Exploits FreePBX music module by injecting shell into multipart filename $CMD.wav on /admin/ajax.php?module=music&command=upload. !/usr/bin/env python3 -- coding: utf-8 -- """FreePBX music module filename RCE — opens execute session.""" import re from kittysploit import from...

ZENworks - UploadServlet RCE Detection (CVE-2015-0779)

Detects CVE-2015-0779 by uploading a JSP via UploadServlet path traversal into zenworks/jsp/core/upload and verifying execution. !/usr/bin/env python3 -- coding: utf-8 -- """Novell ZENworks UploadServlet arbitrary JSP upload CVE-2015-0779.""" from kittysploit import from...

NUUO NVRmini 2 - File Upload Detection (CVE-2018-11523)

Detects CVE-2018-11523 by uploading a PHP phpinfo payload to /upload.php and verifying execution. !/usr/bin/env python3 -- coding: utf-8 -- """NUUO NVRmini 2 unauthenticated PHP upload CVE-2018-11523.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

osCommerce - file_manager.php Arbitrary Upload Detection (CVE-2009-20006)

Detects CVE-2009-20006 by uploading a marker PHP via admin/filemanager.php/login.php?action=save. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CVE-2009-20006 by uploading a marker PHP via admin/filemanager.""" import re from kittysploit import from lib.protocols.http.httpclient import...

TCExam - Unauthenticated File Upload RCE Detection (CVE-2010-2153)

Detects CVE-2010-2153 by uploading a phpinfo shell via tcefunctionstcecodeeditor.php. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CVE-2010-2153 by uploading a phpinfo shell via tcefunctionstcecodeeditor.""" import re from kittysploit import from lib.protocols.http.httpclient import...

jQuery File Upload - Unauth Upload RCE Detection (CVE-2018-9206)

Detects CVE-2018-9206 by uploading a PHP one-liner via blueimp jQuery-File-Upload endpoints and executing id. !/usr/bin/env python3 -- coding: utf-8 -- """Blueimp jQuery File Upload unauthenticated RCE CVE-2018-9206.""" import re from urllib.parse import urlparse from kittysploit import from...