vuln-chain-lab

File Upload Bypass + Stored XSS PoC Lab Намеренно уязвимое веб-приложение, демонстрирующее, как обход загрузки файлов сочетается с хранимой XSS для создания бэкдор-учетных записей администратора, даже при наличии CSP, CORS и CSRF-защиты. Полная статья в блоге: KurtiseBear Blog Это образовательный...

GHSA-PJ5H-5Q6C-3PFX Payload external upload trust validation issue

Impact Under certain external upload configurations, Payload could send authentication data to a destination that was not verified as trusted. If the affected request contained a valid session, this could expose that session to an unintended recipient. You are affected if: - You have enabled...

Payload external upload trust validation issue

Impact Under certain external upload configurations, Payload could send authentication data to a destination that was not verified as trusted. If the affected request contained a valid session, this could expose that session to an unintended recipient. You are affected if: - You have enabled...

EUVD-2026-93507

Payload external upload trust validation issue...

NPM: Payload external upload trust validation issue

NPM: Payload external upload trust validation issue vulnerability discovered by ? in WordPress Npm payload versions = 3.0.0, 3.90.0...

Payload: Bypassed sanitization of user uploaded SVGs

Impact A malicious SVG file upload could bypass sanitization, be stored, and execute attacker-controlled JavaScript XSS after a user downloads it and opens it. You are affected if: - You have a collection configured to upload and allow SVG files which can then be downloaded by users. Patches The...

Payload: Incomplete validation during the upload file lifecycle

Impact Under certain conditions, an authenticated user with permission to modify uploads could cause unintended files to be removed during file cleanup. This may result in data loss or service disruption. You are affected if: - You use Payload upload collections with local file storage. - Untrust...

GHSA-P223-2WR2-J562 Payload: Incomplete validation during the upload file lifecycle

Impact Under certain conditions, an authenticated user with permission to modify uploads could cause unintended files to be removed during file cleanup. This may result in data loss or service disruption. You are affected if: - You use Payload upload collections with local file storage. - Untrust...

NPM: Payload: Incomplete validation during the upload file lifecycle

NPM: Payload: Incomplete validation during the upload file lifecycle vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...

Payload: Uploaded XML files could execute same-origin JavaScript

Impact Under certain local upload configurations, an uploaded XML file and stylesheet could execute JavaScript in the Payload origin when a logged-in user opens the file. You are affected if: - You accept XML uploads accepted by default. Patches Users should upgrade Payload packages to = 3.90.0 o...

WordPress Bricksforge plugin <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter vulnerability

Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter vulnerability discovered by d.v4ns3c in WordPress Plugin Bricksforge versions = 3.1.8.9...

WordPress Super Forms plugin <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File Upload via 'extensions' Form Element Attribute vulnerability

Authenticated Subscriber+ Arbitrary File Upload via 'extensions' Form Element Attribute vulnerability discovered by d.v4ns3c in WordPress Plugin Super Forms versions = 6.3.316...

Popcorn-TJNULL-OSCP-

HackTheBox: Popcorn 라이트업 날짜: 2026년 6월 5일 난이도: 쉬움 플랫폼: HackTheBox 주요 기술: 포트 및 서비스 열거, 디렉터리 퍼징 Gobuster, 파일 업로드 우회, HTTP 요청 조작 Burp Suite, 원격 코드 실행 RCE, 고급 TTY 셸 안정화 Python, 로컬 커널/PAM 익스플로잇 MOTD 파일 변조. 1. 정찰 및 열거 포트 스캔 빠른 정찰 모든 65,535개 포트에 대해 빠른 TCP 포트 스캔-p-을 수행하여 열린 진입점을 찾습니다. 감사 환경에서 프로세스를 간소화하기...

CVE-2025-64095

=== 설명 === DNN이전 명칭 DotNetNuke은 마이크로소프트 생태계의 오픈 소스 웹 콘텐츠 관리 플랫폼CMS입니다. 10.1.1 이전 버전에서는 기본 HTML 편집기 공급자가 인증되지 않은 파일 업로드를 허용하며, 이미지가 기존 파일을 덮어쓸 수 있습니다. 인증되지 않은 사용자가 파일을 업로드하고 기존 파일을 교체하여 웹사이트 훼손이 가능하며, 다른 문제와 결합하면 XSS 페이로드를 주입할 수 있습니다. 이 취약점은 10.1.1에서 수정되었습니다...

CVE-2024-53677

CVE-2024-53677 Эксплойт для доказательства концепции уязвимости CVE-2024-53677 — уязвимость обхода пути при загрузке файлов в Apache Struts, приводящая к удаленному выполнению кода...

Gitlab-CVE-2021-22205

Неаутентифицированный RCE на Gitlab версии -c Протестировано на версии 13.10.1-ce.0...

CVE-2009-2265-fix

CVE-2009-2265 - Adobe ColdFusion RCE ColdFusion에 번들로 포함된 FCKeditor 컴포넌트의 임의 파일 업로드를 통한 인증되지 않은 원격 코드 실행. 파일 업로드 엔드포인트는 filename 파라미터에서 널 바이트 주입을 허용하여, JSP 웹셸을 업로드하고 서버에서 직접 실행할 수 있게 한다. 취약한 버전 Version| Status ---|--- ColdFusion 8.0| Vulnerable ColdFusion 8.0.1| Vulnerable ColdFusion 9.0| Vulnerab...

CVE-2026-25860

CVE-2026-25860 OpenClinic GA 5.247.01 DICOM 이미지 업로드 핸들러를 통한 반사형 XSS 이 XSS를 RCE와 연쇄적으로 사용하려면 다음을 읽을 수 있습니다: https://www.partywave.site/show/research/cve-2026-25860-openclinic-ga-xss-to-rce 설명 OpenClinic GA = v5.351.192026년 12월 5일는 DICOM 이미지 업로드 핸들러에 반사형 크로스사이트 스크립팅 취약점을 포함하고 있으며, 공격자는 DICOM 파일 메타데...

CVE-2018-9206-jquery-file-upload

CVE-2018-9206 - лаборатория Blueimp jQuery-File-Upload Уязвимое Docker-окружение для CVE-2018-9206 - неограниченная загрузка файлов в Blueimp jQuery-File-Upload ' Execute it curl "http://localhost:8888/jQuery-File-Upload/server/php/files/test.php" Output: CVE-2018-9206-PWNED Или запустите...

-Limesurvey-RCE-CVE-2021-44967

🚀 LimeSurvey RCE CVE-2021-44967 - Авторизованное удаленное выполнение кода Этот репозиторий содержит функциональный эксплойт для CVE-2021-44967 — уязвимости авторизованного удаленного выполнения кода в LimeSurvey. 🎯 Совместимость Протестировано и подтверждена работа на: LimeSurvey 5.2.x LimeSurve...