CVE-2026-80236

Efence developed by Thinking Software Technology has a SQL Injection vulnerability. Unauthenticated remote attackers can access file upload functionality and read database contents...

CVE-2026-80237

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

CVE-2026-80233

CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shells backdoors, thereby enabling arbitrary code execution on the server...

WordPress CM Map Locations plugin <= 2.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via cmloc_route_image_upload AJAX Action vulnerability

Authenticated Subscriber+ Arbitrary File Upload via cmlocrouteimageupload AJAX Action vulnerability discovered by Spy0x7 in WordPress Plugin CM Map Locations versions = 2.1.8...

EUVD-2026-66346

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

CVE-2026-80237 Thinking Software Technology｜Efence - Arbitrary File Upload

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

CVE-2026-80237

EFence , developed by Thinking Software Technology , suffers from an Arbitrary File Upload vulnerability. An authenticated remote attacker (low privileges) can upload and execute a web shell on the server, leading to arbitrary code execution with high impact on confidentiality, integrity, and ava...

EUVD-2026-66345

Efence developed by Thinking Software Technology has a SQL Injection vulnerability. Unauthenticated remote attackers can access file upload functionality and read database contents...

CVE-2026-80236

Efence , a product developed by Thinking Software Technology , is affected by a SQL Injection vulnerability. An unauthenticated remote attacker can access the file upload functionality to read database contents . The CVSS v3.1 score is 8.2 (HIGH) , reflecting network-reachable exploitation with l...

CVE-2026-80236 Thinking Software Technology｜Efence - SQL Injection

Efence developed by Thinking Software Technology has a SQL Injection vulnerability. Unauthenticated remote attackers can access file upload functionality and read database contents...

CVE-2026-80235 Thinking Software Technology｜EFence - Arbitrary File Upload

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

CVE-2026-80235

EFence by Thinking Software Technology is affected by an Arbitrary File Upload vulnerability that allows unauthenticated remote attackers to upload and execute web shell backdoors, leading to arbitrary code execution on the server. The vulnerability is rated CRITICAL with a CVSS 3.1 base score of...

EUVD-2026-66344

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

EUVD-2026-66342

CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shells backdoors, thereby enabling arbitrary code execution on the server...

CVE-2026-80233

CAYIN Technology's CMS-WS, CMS-SE, and SMP series products are affected by an arbitrary file upload vulnerability. A privileged remote attacker can upload and execute web shells, enabling arbitrary code execution on the server. Per the CVSS 3.1 score of 7.2 (HIGH) from TWCERT, the attack requires...

CVE-2026-80233 CAYIN Technology｜CAYIN CMS-WS/CMS-SE/SMP - Arbitrary File Upload

CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shells backdoors, thereby enabling arbitrary code execution on the server...

CVE-2026-38526

CVE-2026-38526 - Krayin CRM PHP Upload RCE Automatisierter Exploit für Krayin CRM ≤ 2.2.x. Dieses Skript nutzt eine Schwachstelle für uneingeschränkten Dateiupload im TinyMCE-Endpunkt /admin/tinymce/upload aus, umgeht die MIME-Typ-Validierung durch Vortäuschung von image/jpeg, lädt eine...

CVE-2024-50803-Redaxo

CVE-2024-50803 XSS memorizzato nella funzionalità mediapool di Redaxo Una vulnerabilità di cross-site scripting XSS memorizzato è stata trovata in Redaxo versioni 5.18.0, consentendo a un attaccante con privilegi sufficienti di caricare un file SVG malevolo attraverso la funzionalità mediapool...

NagiosXI-RCE-all-version-CVE-2021-40345

NagiosXI RCE File-Upload CVE-2021-40345 Da RFI autenticato a RCE per lo sfruttamento di Nagios/NagiosXI Step 1 : Vai alla pagina di gestione dei "dashlets" e scarica uno di loro sto usando "rssdashlet" per l'esempio : root@kitploit: http://TARGETIP/nagiosxi/admin/dashlets.php?download=rssdashlet...

CVE-2026-15203

Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service...