CVE-2026-5096 Everest Forms <= 3.4.4 - Unauthenticated Server-Side Request Forgery via Upload Field 'Previous Value'

The Everest Forms plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.4.4. This is due to the loadpreviousfieldvalue method in class-evf-form-task.php accepting arbitrary URL values from $POST data for upload fields without domain restriction,...

CVE-2026-5096

The Everest Forms WordPress plugin (versions

EUVD-2026-67710

The Everest Forms plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.4.4. This is due to the loadpreviousfieldvalue method in class-evf-form-task.php accepting arbitrary URL values from $POST data for upload fields without domain restriction,...

EXPLOIT-CVE-2025-27515

CVE-2025-27515 Proof of Concept Eine praktische Demonstration von CVE-2025-27515 , einer Schwachstelle zur Umgehung der Datei-Upload-Validierung im Laravel-Framework ≤ 12.0.0. Überblick über die Schwachstelle CVE-2025-27515 ist eine Validierungsumgehung, die es Angreifern ermöglicht,...

WordPress Shared Files plugin < 1.7.67 - Unauthenticated Limited File Upload vulnerability

Unauthenticated Limited File Upload vulnerability discovered by hoangphuong in WordPress Plugin Shared Files versions 1.7.67...

WordPress Shared Files Pro plugin < 1.7.70 - Unauthenticated Limited File Upload vulnerability

Unauthenticated Limited File Upload vulnerability discovered by hoangphuong in WordPress Plugin Shared Files Pro versions 1.7.70...

0-click-RCE-Exploit-for-CVE-2024-50526

CVE-2024-50526 / 0-Click RCE Exploit Autor: Joshua Provoste https://x.com/JoshuaProvoste/status/1859403137435459727 Dieses Repository enthält einen Proof-of-Concept-Exploit für CVE-2024-50526, eine nicht authentifizierte Schwachstelle zum beliebigen Hochladen von Dateien im WordPress-Plugin Multi...

CVE-2025-31324

CVE-2025-31324 Proof-of-Concept 0day per SAP NetWeaver creato da ShinyHunters CVE-2025-31324 è una vulnerabilità critica di "Caricamento di file senza restrizioni" che colpisce il server applicativo SAP NetWeaver AS Java. In particolare, risiede nel componente Visual Composer VCFRAMEWORK. La fall...

CVE-2021-21972

Uso:CVE-2021-21972.py option -u or --url: url di destinazione -t or --type: tipo di Payload ssh/webshell -f or --file: il file da caricare webshell o authorizedkeys Esempio: CVE-2021-21972.py -u https://127.0.0.1 -t webshell -f shell.jsp -p or --proxy: impostazione del proxy Esempio:...

EUVD-2026-67690

filebrowser from version 2.24.0 contains a race condition in the TUS upload handler that allows authenticated users to write past the declared Upload-Length by sending concurrent PATCH requests. Attackers can send multiple simultaneous PATCH requests at the same offset to bypass length validation...

CVE-2026-82238

filebrowser version 2.24.0 contains a race condition in the TUS upload handler that allows authenticated users to bypass upload-length validation by sending multiple concurrent PATCH requests at the same offset. This results in files that exceed their declared Upload-Length and triggers completio...

CVE-2026-82238 filebrowser 2.24.0 Race Condition via TUS concurrent PATCH uploads

filebrowser from version 2.24.0 contains a race condition in the TUS upload handler that allows authenticated users to write past the declared Upload-Length by sending concurrent PATCH requests. Attackers can send multiple simultaneous PATCH requests at the same offset to bypass length validation...

EUVD-2026-67685

SiYuan before v3.8.1 contains a path traversal vulnerability in the asset.upload MCP tool that accepts arbitrary absolute file paths without workspace boundary validation. Attackers can induce the AI Agent to upload sensitive files such as SSH keys or credentials from outside the workspace into t...

CVE-2026-82233 SiYuan before v3.8.1 Path Traversal via asset.upload

SiYuan before v3.8.1 contains a path traversal vulnerability in the asset.upload MCP tool that accepts arbitrary absolute file paths without workspace boundary validation. Attackers can induce the AI Agent to upload sensitive files such as SSH keys or credentials from outside the workspace into t...

CVE-2026-82233 SiYuan before v3.8.1 Path Traversal via asset.upload

SiYuan before v3.8.1 contains a path traversal vulnerability in the asset.upload MCP tool that accepts arbitrary absolute file paths without workspace boundary validation. Attackers can induce the AI Agent to upload sensitive files such as SSH keys or credentials from outside the workspace into t...

CVE-2024-51793

WordPress Computer Repair Shop = 3.8115 – Nicht authentifizierter beliebiger Datei-Upload CVE-2024-51793 Das CRM WordPress Plugin – RepairBuddy Plugin für WordPress ist anfällig für beliebige Datei-Uploads aufgrund fehlender Dateityp-Validierung in allen Versionen bis einschließlich 3.8115. Dies...

0-click-RCE-Exploit-for-CVE-2024-9932

CVE-2024-9932 / Exploit de RCE sem clique 0-Click Autor: Joshua Provoste https://x.com/JoshuaProvoste/status/1858329238153072668 Este repositório contém um exploit de prova de conceito para o CVE-2024-9932, uma vulnerabilidade de upload arbitrário de arquivos sem autenticação no plugin Wux Blog...

CVE-2021-21978

CVE-2021-21978 CVE-2021-21978 RCE exp Betroffene Versionen VMware View Planner Harness 4.X Ähnlich wie CVE-2021-21978 kann diese Schwachstelle ohne Authentifizierung beliebige Dateien hochladen und durch Änderung des mitgelieferten Python-Skripts eine Remote-Code-Ausführung ermöglichen. Es ist zu...

CVE-2026-12514

The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.70 do not perform a capability check in their file-upload handler, which is registered for unauthenticated users and protected only by a nonce that is output on public pages, so an unauthenticated visito...

webuploader-0.1.15-Demo

Il componente webuploader-v-0.1.15 presenta una vulnerabilità di upload di file non autorizzato Introduzione: il componente Baidu WebUploader presenta una vulnerabilità di upload di file. La vulnerabilità è dovuta al fatto che la pagina di upload del componente WebUploader non filtra rigorosament...