CVE-2026-Pending-Flask-Uploads-Path-Traversal-PoC

CVE-2026-XXXXX قيد الانتظار: ثغرة اجتياز المسار في Flask-Uploads معلومات الثغرة المنتج : Flask-Uploads الإصدار : 0.2.1 وربما إصدارات أقدم نوع الثغرة : اجتياز المسار Directory Traversal معرف CWE : CWE-22 الخطورة : عالية CVSS 7.5 الأثر : كتابة ملفات عشوائية، تنفيذ تعليمات برمجية عن بُعد RCE الوصف...

Adning Advertising <= 1.5.5 - Arbitrary File Upload

The Adning Advertising plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ninguploadimage function in versions up to, and including, 1.5.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites...

Cisco VPN Routers - Unauthenticated Arbitrary File Upload

A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement...

WordPress File Manager <= 7.2.1 - Directory Traversal

File Manager and File Manager Pro plugins for WordPress versions up to 7.2.1 and 8.3.4 contain a directory traversal caused by the 'target' parameter in mkfilefoldermanageractioncallbackshortcode, letting attackers read arbitrary files and upload files outside designated directories, exploit...

MinIO - Incomplete Signature Validation for Unsigned-Trailer Uploads

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. The signature component of the authorization may be invalid, which would mean that as a client you can use any arbitrary secret to upload objects given the user already has prior WRITE permissions on...

CVE-2024-1209

CVE-2024-1209 Esposizione di informazioni sensibili tramite gli assignment in LearnDash. Visitatori non autenticati possono sfogliare e scaricare gli assignment caricati. Vulnerability: CVE-2024-1209 Esposizione di informazioni sensibili tramite assignment CVSS: 5.3 Media Software: LearnDash...

CVE-2024-11680_PoC_Exploit

CVE-2024-11680 Exploit PoC Questo repository contiene un exploit Proof of Concept PoC per CVE-2024-11680, una vulnerabilità critica in ProjectSend r1605 e versioni precedenti. L'exploit sfrutta un difetto di autenticazione impropria dovuto a problemi di configurazione errata dei privilegi...

Ninja Forms File Uploads <= 3.3.26 - Arbitrary File Upload

Ninja Forms File Uploads plugin for WordPress versions up to and including 3.3.26 is vulnerable to unauthenticated arbitrary file upload which could lead to remote code execution. id: CVE-2026-0740 info: name: Ninja Forms File Uploads = 3.3.26 - Arbitrary File Upload author: whattheslime severity...

CVE-2024-50379-POC

CVE-2024-50379-POC Questo repository contiene uno script Python progettato per sfruttare CVE-2024-50379 , una vulnerabilità che consente agli attaccanti di caricare una shell JSP su un server vulnerabile ed eseguire comandi arbitrari da remoto. Questo exploit è particolarmente utile quando la...

CVE-2019-10869

CVE-2019-10869 Wordpress Ninja Forms File Uploads Extension -----------------------------16345274557837-- Risposta:...

CVE-2020-10977

GitLab v12.4.0-12.8.1 RCE Basato interamente su https://github.com/dotPY-hax/gitlabRCE, che non funzionava per me e il parsing HTML sembrava macchinoso, così l'ho riscritto in js. Utilizzo Avvia un handler di reverse shell nel modo consueto, quindi esegui questo script con: root@kitploit:...

CVE-2026-77037

multer is a Node.js middleware for handling multipart/form-data uploads. In version 2.2.0 , when a disk-backed upload is aborted or truncated before the write stream finishes, the disk storage engine removes the visible file but fails to close the underlying write file descriptor , leaving a dele...

chyrp-lite-rce-poc

chyrp-lite-rce-poc CVE-2026-53767 + CVE-2026-53768 - RCE autenticado no Chyrp Lite ≤ 2026.01 "Iriomote" Ataque encadeado: bypass da blocklist de uploadspath CVE-2026-53768 + ausência de validação de extensão de arquivo em adminupdateupload CVE-2026-53767 → Execução Remota de Código como www-data...

CVE-2024-22515-File-Upload-Vulnerability

CVE-2024-22515: Vulnerabilità di Upload di File in Agent DVR Informazioni Descrizione In iSpyConnect.com Agent DVR 5.1.6.0, manca la verifica del tipo di file per i caricamenti di file audio. Ciò consente a un utente autenticato di caricare qualsiasi tipo di file tramite il componente di upload...

CVE-2026-82238

filebrowser version 2.24.0 contains a race condition in the TUS upload handler that allows authenticated users to bypass upload-length validation by sending multiple concurrent PATCH requests at the same offset. This results in files that exceed their declared Upload-Length and triggers completio...

osi.ig

Open Source Information Instagram so recently ig started sending html response insted of json to "unknown" requests. i REALLY wanted this to work without login since i don't use ig anymore, tried few ways i knew to get it working without login but it didn't work :/ anyways since lot of people are...

cve-2020-10977

CVE-2020-10977 GitLab 12.9.0 Lettura Arbitraria di File Target : 12.9.0 e versioni precedenti Testato : GitLab 12.8.1 In un recente engagement ho trovato un'istanza GitLab sul target; ho trovato un PoC su Exploit-DB, ma utilizza LDAP per l'autenticazione, che in questo caso era disabilitato, quin...

CVE-2015-4133

CVE-2015-4133 root@kitploit: usage: CVE-2015-4133.py -h --RHOST RHOST --RPORT RPORT -v YEAR MONTH FILE ReFlex Gallery WordPress plugin = 3.1.3 CVE-2015-4133 PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2015-4133 positional arguments: YEAR wp-content/uploads sub directory MONTH...

CVE-2026-0740

CVE-2026-0740 : Ninja Forms - File Upload = 3.3.26 Caricamento Arbitrario di File Non Autenticato. Descrizione : Il plugin Ninja Forms - File Uploads per WordPress è vulnerabile al caricamento arbitrario di file non autenticato a causa della mancanza di validazione del tipo di file e della mancan...

Atom-CMS-2.0---File-Upload-Remote-Code-Execution-Un-Authenticated-POC

Atom-CMS-2.0---Caricamento-File-Esecuzione-Remota-Di-Codice-Non-Autenticato- Esecuzione remota di codice RCE Autore Exploit: Ashish Koli Shikari Homepage del fornitore: https://thedigitalcraft.com/ Link del software: https://github.com/thedigicraft/Atom.CMS Versione: 2.0 CVE: CVE-2022-25487 A...