Payload external upload trust validation issue

Impact Under certain external upload configurations, Payload could send authentication data to a destination that was not verified as trusted. If the affected request contained a valid session, this could expose that session to an unintended recipient. You are affected if: - You have enabled...

GHSA-PJ5H-5Q6C-3PFX Payload external upload trust validation issue

Impact Under certain external upload configurations, Payload could send authentication data to a destination that was not verified as trusted. If the affected request contained a valid session, this could expose that session to an unintended recipient. You are affected if: - You have enabled...

NPM: Payload external upload trust validation issue

NPM: Payload external upload trust validation issue vulnerability discovered by ? in WordPress Npm payload versions = 3.0.0, 3.90.0...

Payload: Bypassed sanitization of user uploaded SVGs

Impact A malicious SVG file upload could bypass sanitization, be stored, and execute attacker-controlled JavaScript XSS after a user downloads it and opens it. You are affected if: - You have a collection configured to upload and allow SVG files which can then be downloaded by users. Patches The...

Payload: Incomplete validation during the upload file lifecycle

Impact Under certain conditions, an authenticated user with permission to modify uploads could cause unintended files to be removed during file cleanup. This may result in data loss or service disruption. You are affected if: - You use Payload upload collections with local file storage. - Untrust...

NPM: Payload: Incomplete validation during the upload file lifecycle

NPM: Payload: Incomplete validation during the upload file lifecycle vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...

GHSA-P223-2WR2-J562 Payload: Incomplete validation during the upload file lifecycle

Impact Under certain conditions, an authenticated user with permission to modify uploads could cause unintended files to be removed during file cleanup. This may result in data loss or service disruption. You are affected if: - You use Payload upload collections with local file storage. - Untrust...

Payload: Uploaded XML files could execute same-origin JavaScript

Impact Under certain local upload configurations, an uploaded XML file and stylesheet could execute JavaScript in the Payload origin when a logged-in user opens the file. You are affected if: - You accept XML uploads accepted by default. Patches Users should upgrade Payload packages to = 3.90.0 o...

WordPress Bricksforge plugin <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter vulnerability

Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter vulnerability discovered by d.v4ns3c in WordPress Plugin Bricksforge versions = 3.1.8.9...

WordPress Super Forms plugin <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File Upload via 'extensions' Form Element Attribute vulnerability

Authenticated Subscriber+ Arbitrary File Upload via 'extensions' Form Element Attribute vulnerability discovered by d.v4ns3c in WordPress Plugin Super Forms versions = 6.3.316...

Popcorn-TJNULL-OSCP-

HackTheBox: Popcorn लेखन दिनांक: जून 05, 2026 कठिनाई: आसान प्लेटफ़ॉर्म: HackTheBox मुख्य तकनीकें: पोर्ट और सेवा खोज, निर्देशिका फ़ज़िंग Gobuster, फ़ाइल अपलोड चोरी, HTTP अनुरोध हेरफेर Burp Suite, दूरस्थ कोड निष्पादन RCE, उन्नत TTY शेल स्थिरीकरण Python, स्थानीय कर्नेल/PAM शोषण MOTD फ़ाइल छेड़छाड़।...

CVE-2025-64095

=== Descripción === DNN anteriormente DotNetNuke es una plataforma de gestión de contenidos web CMS de código abierto en el ecosistema de Microsoft. Antes de la versión 10.1.1, el proveedor de editor HTML predeterminado permite la carga de archivos no autenticados y las imágenes pueden sobrescrib...

CVE-2024-53677

CVE-2024-53677 Proof of concept exploit for CVE-2024-53677 - Apache Struts file upload path traversal vulnerability leading to Remote Code Execution...

Gitlab-CVE-2021-22205

Unauthenticated RCE on Gitlab version -c Tested on version 13.10.1-ce.0...

CVE-2009-2265-fix

CVE-2009-2265 - Adobe ColdFusion RCE Unauthenticated remote code execution via arbitrary file upload in the FCKeditor component bundled with ColdFusion. The file upload endpoint accepts a null-byte injection in the filename parameter, allowing a JSP webshell to be uploaded and executed directly b...

CVE-2026-25860

CVE-2026-25860 OpenClinic GA 5.247.01 Reflected XSS via DICOM Image Upload Handler If you want to chain this XSS with RCE you can read: https://www.partywave.site/show/research/cve-2026-25860-openclinic-ga-xss-to-rce Description OpenClinic GA = v5.351.19 12/05/2026 contains a reflected cross-site...

CVE-2018-9206-jquery-file-upload

CVE-2018-9206 - Blueimp jQuery-File-Upload Lab Vulnerable Docker environment for CVE-2018-9206 - Unrestricted File Upload in Blueimp jQuery-File-Upload ' Execute it curl "http://localhost:8888/jQuery-File-Upload/server/php/files/test.php" Output: CVE-2018-9206-PWNED Or run the PoC script:...

-Limesurvey-RCE-CVE-2021-44967

🚀 LimeSurvey RCE CVE-2021-44967 - Authenticated Remote Code Execution This repository contains a functional exploit for CVE-2021-44967 , an authenticated Remote Code Execution vulnerability in LimeSurvey. 🎯 Compatibility Tested and confirmed working on: LimeSurvey 5.2.x LimeSurvey 6.x 🐛...

ChamiloLMS-CVE-2023-4220

ChamiloLMS CVE-2023-4220 Exploit Python exploit for CVE-2023-4220 , an unauthenticated arbitrary file upload vulnerability affecting Chamilo LMS = 1.11.24. The vulnerability is located in Chamilo's BigUpload component. On vulnerable installations, the upload handler allows a PHP file to be upload...

EUVD-2026-94329

Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that allows remote attackers to inject OPEN: records via crafted tg:// links containing unescaped semicolons. Attackers can reach the interpret: scheme handler to upload local files, including...