CVE-2026-3844-Lab

CVE-2026-3844 — Breeze Cache: Lab für nicht authentifizierten beliebigen Datei-Upload zu RCE Reines lokales Docker-Lab zur Reproduktion und zum Vergleich des Verhaltens von CVE-2026-3844 im WordPress-Breeze-Cache-Plugin. Dieses Repository demonstriert das verwundbare Verhalten in Breeze Cache 2.4...

CVE-2025-70849

CVE-2025-70849: XSS Memorizzato in Podinfo Riepilogo Una vulnerabilità di sicurezza CWE-79 è stata identificata in Podinfo , un'applicazione web per dimostrare microservizi Kubernetes. La funzionalità /store consente a utenti non autenticati di caricare contenuti HTML/JS arbitrari, portando a XSS...

CVE-2026-81931

Roskus Prospero Flow CRM before 5.16.0 is affected by an unrestricted file upload in the product photo feature. The validation logic checks only magic bytes and blocks a fixed list of PHP extensions , but ProductSaveController::save() stores the file using the client-supplied extension in the pub...

EUVD-2026-67225

Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow CRM before 5.16.0 allows an authenticated user holding the create product permission routine Seller role to execute arbitrary JavaScript in the application origin. The photo validation rule...

CVE-2026-81931 Unrestricted upload of file with dangerous type in Prospero Flow CRM product photo allows stored cross-site scripting

Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow CRM before 5.16.0 allows an authenticated user holding the create product permission routine Seller role to execute arbitrary JavaScript in the application origin. The photo validation rule...

CVE-2026-81931 Unrestricted upload of file with dangerous type in Prospero Flow CRM product photo allows stored cross-site scripting

Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow CRM before 5.16.0 allows an authenticated user holding the create product permission routine Seller role to execute arbitrary JavaScript in the application origin. The photo validation rule...

CVE-2026-18886

CVE-2026-18886 is an improper access control vulnerability in the ServiceNow AI platform , specifically in the System Configuration Image Upload Processor . An unauthenticated user can, in certain circumstances, create or modify instance data beyond intended scope, leading to privilege escalation...

CVE-2026-18886 Unauthenticated Privilege Escalation via System Configuration Image Upload Processor

ServiceNow has remediated an improper access control vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to create or modify instance data beyond what was intended, resulting in privilege escalation. ...

EUVD-2026-64745

DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in /blackbox/upgrade/, as well as overwrite existing files in that directory. An...

PanaceaSoft-0day-Exploit

PanaceaSoft-0day-Exploit Exploit 0day PanaceaSoft todos os produtos https://packetstormsecurity.com/files/157869/PanaceaSoft-Shell-Upload.html sem write-up leia: PHP Upload Handler do jQuery File Upload...

proxylogon-exploit

proxylogon Proof-of-concept-Exploit für CVE-2021-26855 und CVE-2021-27065, der eine nicht authentifizierte Remote-Codeausführung auf Microsoft Exchange ermöglicht, wie in den folgenden Ressourcen beschrieben: https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers...

Bypass-File-Upload-on-Koken-CMS

Koken CMS पर फ़ाइल अपलोड बाइपास करें यह रिपॉज़िटरी बताती है कि Koken CMS - 0.22.24 प्रमाणित पर फ़ाइल अपलोड प्रतिबंधों को कैसे बाइपास किया जाए। Koken CMS के बारे में Koken एक निःशुल्क सामग्री प्रबंधन प्रणाली है जो फोटोग्राफरों, डिज़ाइनरों और कलाकारों के लिए डिज़ाइन की गई है। वेबसाइट:...

Unrestricted-File-Upload-on-SiteMagic-CMS-4.4.2

Upload di file senza restrizioni su SiteMagic CMS 4.4.2 Questo repository descrive come sfruttare la vulnerabilità di upload di file senza restrizioni su SiteMagic CMS 4.4.2 Informazioni su SiteMagic CMS 4.4.2 Sito web: https://sitemagic.org/ Download: https://sitemagic.org/Download.html PoC -...

Limesurvey-RCE

Limesurvey-RCE LimeSurvey RCE autenticato Prova di concetto: 1. Crea i tuoi file config.xml e i file della reverse shell php 2. Crea un archivio con questi file 3. Accedi con le credenziali 4. Vai su Configurazione - Plugin - Carica e installa 5. Scegli il tuo file zippato 6. Carica 7. Installa 8...

exploits

exploits Le PoC pubblicate sono disponibili su exploitdb.com Patient Appointment Scheduler System v1.0: Inbit Messenger v4.6.0:...

CVE-2016-10204_Webshell

CVE-2016-10204Webshell Uno script bash che dimostra lo sfruttamento manuale di CVE-2016-10204 contro un endpoint target, portando al caricamento di una webshell php. Attualmente, la variabile webshell è impostata per un payload MySQL. Può essere sostituita con qualsiasi backend sia necessario...

CVE-2026-79653

In Eclipse SW360 versions 19.0.0, 19.1.0, 19.2.0, 20.0.0, 20.1.0, if the system is configured to use file system storage with config key enable.attachment.store.to.file.system, the attacker can manipulate the filename upon upload and can essentially cause arbitrary file path traversal. The...

CVE-2026-78251

DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in /blackbox/upgrade/, as well as overwrite existing files in that directory. An...

CVE-2023-4861-PoC

CVE-2023-4861 PoC Questo repository contiene una prova di concetto in Python per CVE-2023-4861 , un problema di esecuzione remota di codice autenticato nel plugin WordPress File Manager Pro - Filester. Riepilogo della vulnerabilità CVE: CVE-2023-4861 Prodotto: File Manager Pro - Filester filester...

EUVD-2026-67130

In Eclipse SW360 versions 19.0.0, 19.1.0, 19.2.0, 20.0.0, 20.1.0, if the system is configured to use file system storage with config key enable.attachment.store.to.file.system, the attacker can manipulate the filename upon upload and can essentially cause arbitrary file path traversal. The...