85672 matches found
CVE-2022-1329
WordPress Plugin - Elementor 3.6.0 3.6.1 3.6.2 تنفيذ التعليمات البرمجية عن بُعد التاريخ: 16 أبريل 2023 مؤلف الاستغلال: Việt Hùng https://github.com/phanthibichtram12 الصفحة الرئيسية للمورّد: https://elementor.com/ رابط البرنامج: https://wordpress.org/plugins/elementor/advanced/ مرر لأسفل واختر...
Worpress-CVE-2023-5360
CVE-2023-5360 CVE-2023-5360 رفع شل تلقائي لـ WordPress Royal Elementor 1.3.78 رفع شل زر https://phankz.com...
CVE-2026-92247
SynaptikCMS File Manager — تنفيذ تعليمات برمجية عن بُعد بعد المصادقة الثغرة الأمنية تنفيذ تعليمات برمجية عن بُعد بعد المصادقة في SynaptikCMS File Manager تتيح أداة إدارة الملفات في SynaptikCMS لمهاجم مُصادَق عليه رفع ملف ثم إعادة تسميته إلى ملف PHP. يمكن استغلال سلوك الرفع وإعادة التسمية هذا لوضع...
CVE-2026-38526
CVE-2026-38526 — Krayin CRM ≤ 2.2.x تنفيذ تعليمات برمجية عن بُعد بعد المصادقة ⚠️ تنبيه قانوني : هذا الكود مُقدَّم لأغراض تعليمية وللاختبارات المصرَّح بها فقط CTF، bug bounty، مختبر خاص. المؤلف غير مسؤول عن أي استخدام غير قانوني. الوصف Krayin CRM Webkul ≤ 2.2.x يكشف عن نقطة النهاية...
vuln-chain-lab
फ़ाइल अपलोड बाइपास + स्टोर्ड XSS PoC लैब एक जानबूझकर कमजोर वेब एप्लिकेशन जो दर्शाता है कि कैसे फ़ाइल अपलोड बाइपास स्टोर्ड XSS के साथ मिलकर बैकडोर एडमिन खाते बनाता है, भले ही CSP, CORS और CSRF सुरक्षाएँ मौजूद हों। पूरा ब्लॉग पोस्ट: KurtiseBear ब्लॉग यह एक शैक्षणिक लैब है जो रक्षात्मक सुरक्षा...
Payload external upload trust validation issue
Impact Under certain external upload configurations, Payload could send authentication data to a destination that was not verified as trusted. If the affected request contained a valid session, this could expose that session to an unintended recipient. You are affected if: - You have enabled...
EUVD-2026-93507
Payload external upload trust validation issue...
GHSA-PJ5H-5Q6C-3PFX Payload external upload trust validation issue
Impact Under certain external upload configurations, Payload could send authentication data to a destination that was not verified as trusted. If the affected request contained a valid session, this could expose that session to an unintended recipient. You are affected if: - You have enabled...
NPM: Payload external upload trust validation issue
NPM: Payload external upload trust validation issue vulnerability discovered by ? in WordPress Npm payload versions = 3.0.0, 3.90.0...
Payload: Bypassed sanitization of user uploaded SVGs
Impact A malicious SVG file upload could bypass sanitization, be stored, and execute attacker-controlled JavaScript XSS after a user downloads it and opens it. You are affected if: - You have a collection configured to upload and allow SVG files which can then be downloaded by users. Patches The...
Payload: Incomplete validation during the upload file lifecycle
Impact Under certain conditions, an authenticated user with permission to modify uploads could cause unintended files to be removed during file cleanup. This may result in data loss or service disruption. You are affected if: - You use Payload upload collections with local file storage. - Untrust...
GHSA-P223-2WR2-J562 Payload: Incomplete validation during the upload file lifecycle
Impact Under certain conditions, an authenticated user with permission to modify uploads could cause unintended files to be removed during file cleanup. This may result in data loss or service disruption. You are affected if: - You use Payload upload collections with local file storage. - Untrust...
NPM: Payload: Incomplete validation during the upload file lifecycle
NPM: Payload: Incomplete validation during the upload file lifecycle vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...
Payload: Uploaded XML files could execute same-origin JavaScript
Impact Under certain local upload configurations, an uploaded XML file and stylesheet could execute JavaScript in the Payload origin when a logged-in user opens the file. You are affected if: - You accept XML uploads accepted by default. Patches Users should upgrade Payload packages to = 3.90.0 o...
WordPress Bricksforge plugin <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter vulnerability
Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter vulnerability discovered by d.v4ns3c in WordPress Plugin Bricksforge versions = 3.1.8.9...
WordPress Super Forms plugin <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File Upload via 'extensions' Form Element Attribute vulnerability
Authenticated Subscriber+ Arbitrary File Upload via 'extensions' Form Element Attribute vulnerability discovered by d.v4ns3c in WordPress Plugin Super Forms versions = 6.3.316...
Popcorn-TJNULL-OSCP-
HackTheBox: Popcorn लेखन दिनांक: जून 05, 2026 कठिनाई: आसान प्लेटफ़ॉर्म: HackTheBox मुख्य तकनीकें: पोर्ट और सेवा खोज, निर्देशिका फ़ज़िंग Gobuster, फ़ाइल अपलोड चोरी, HTTP अनुरोध हेरफेर Burp Suite, दूरस्थ कोड निष्पादन RCE, उन्नत TTY शेल स्थिरीकरण Python, स्थानीय कर्नेल/PAM शोषण MOTD फ़ाइल छेड़छाड़।...
CVE-2025-64095
=== विवरण === DNN पूर्व में DotNetNuke माइक्रोसॉफ्ट पारिस्थितिकी तंत्र में एक ओपन-सोर्स वेब सामग्री प्रबंधन मंच CMS है। 10.1.1 से पहले, डिफ़ॉल्ट HTML संपादक प्रदाता बिना प्रमाणीकरण के फ़ाइल अपलोड की अनुमति देता है और चित्र मौजूदा फ़ाइलों को अधिलेखित कर सकते हैं। एक अप्रमाणित उपयोगकर्ता मौजूदा...