Lucene search
+L

32 matches found

Nuclei
Nuclei
added 2026/09/13 4:24 p.m.6 views

tpadmin <= 1.3.12 - Remote Code Execution

yuan1994 tpadmin up to version 1.3.12 is vulnerable to Remote Code Execution via unrestricted file upload in the WebUploader preview component /public/static/admin/lib/webuploader/0.1.5/server/preview.php. An unauthenticated remote attacker can submit base64-encoded PHP payloads leading to...

9.8CVSS0.02034EPSS
SaveExploits3References2
Kitploit
Kitploit
added 2026/09/11 6:15 a.m.7 views

webuploader-0.1.15-Demo

webuploader-v-0.1.15 Component Has an Unauthorized File Upload Vulnerability Introduction: Baidu's WebUploader component has a file upload vulnerability. This vulnerability is caused by the upload page of the WebUploader component not strictly filtering file types or file extensions. Attackers ca...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 5:41 p.m.6 views

tpadmin-CVE-2026-2113-poc

tpadmin-CVE-2026-2113-poc 一个通过任意文件上传(Arbitrary File Upload)利用具备 Web 服务器权限的远程代码执行(Remote Code Execution)漏洞的概念验证(PoC)。 漏洞描述 H-ui.admin 系统的 WebUploader 预览组件中存在一个严重的远程代码执行漏洞。/public/static/admin/lib/webuploader/0.1.5/server/preview.php 文件缺少适当的身份验证和文件校验,导致未认证攻击者可以直接将任意 PHP 文件上传到 Web 服务器,从而实现具备 Web...

9.8CVSS7.5AI score0.02034EPSS
SaveExploits3References2
Packet Storm
Packet Storm
added 2026/02/10 12:00 a.m.161 views

📄 yuan1994 tpadmin Shell Upload

yuan1994 tpadmin versions up to 1.3.12 suffers from a remote shell upload vulnerability. tpadmin-CVE-2026-2113-poc A proof-of-concept exploiting a Remote Code Execution with web server privileges via Arbitrary File Upload. Vulnerability Description A critical Remote Code Execution vulnerability...

9.8CVSS5.5AI score0.96438EPSS
SaveExploits5
RedhatCVE
RedhatCVE
added 2026/02/09 1:33 a.m.18 views

CVE-2026-2113

A security vulnerability has been detected in yuan1994 tpadmin up to 1.3.12. This affects an unknown part in the library /public/static/admin/lib/webuploader/0.1.5/server/preview.php of the component WebUploader. The manipulation leads to deserialization. The attack is possible to be carried out...

9.8CVSS6.7AI score0.02034EPSS
SaveExploits3References1
NVD
NVD
added 2026/02/07 9:15 p.m.16 views

CVE-2026-2113

A security vulnerability has been detected in yuan1994 tpadmin up to 1.3.12. This affects an unknown part in the library /public/static/admin/lib/webuploader/0.1.5/server/preview.php of the component WebUploader. The manipulation leads to deserialization. The attack is possible to be carried out...

9.8CVSS0.02034EPSS
SaveExploits3References4
ATTACKERKB
ATTACKERKB
added 2026/02/07 9:02 p.m.9 views

CVE-2026-2113

A security vulnerability has been detected in yuan1994 tpadmin up to 1.3.12. This affects an unknown part in the library /public/static/admin/lib/webuploader/0.1.5/server/preview.php of the component WebUploader. The manipulation leads to deserialization. The attack is possible to be carried out...

7.5CVSS6.7AI score0.02034EPSS
SaveExploits3References4Affected Software1
Cvelist
Cvelist
added 2026/02/07 9:02 p.m.51 views

CVE-2026-2113 yuan1994 tpadmin WebUploader preview.php deserialization

A security vulnerability has been detected in yuan1994 tpadmin up to 1.3.12. This affects an unknown part in the library /public/static/admin/lib/webuploader/0.1.5/server/preview.php of the component WebUploader. The manipulation leads to deserialization. The attack is possible to be carried out...

7.5CVSS0.02034EPSS
SaveExploits3References4
EUVD
EUVD
added 2026/02/07 9:02 p.m.12 views

EUVD-2026-5715

A security vulnerability has been detected in yuan1994 tpadmin up to 1.3.12. This affects an unknown part in the library /public/static/admin/lib/webuploader/0.1.5/server/preview.php of the component WebUploader. The manipulation leads to deserialization. The attack is possible to be carried out...

7.5CVSS5AI score0.02034EPSS
SaveExploits3References4
OSV
OSV
added 2026/02/07 9:02 p.m.12 views

CVE-2026-2113 yuan1994 tpadmin WebUploader preview.php deserialization

A security vulnerability has been detected in yuan1994 tpadmin up to 1.3.12. This affects an unknown part in the library /public/static/admin/lib/webuploader/0.1.5/server/preview.php of the component WebUploader. The manipulation leads to deserialization. The attack is possible to be carried out...

6.9CVSS6.4AI score
SaveExploits0References6
CVE
CVE
added 2026/02/07 9:02 p.m.44 views

CVE-2026-2113

tpadmin up to v1.3.12 is affected by a remote code execution/deserialization vulnerability in /public/static/admin/lib/webuploader/0.1.5/server/preview.php. The webuploader/preview.php endpoint lacks proper authentication and file validation, allowing unauthenticated attackers to upload arbitrary...

9.8CVSS5AI score0.02034EPSS
SaveExploits3References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/07 9:02 p.m.4 views

CVE-2026-2113 yuan1994 tpadmin WebUploader preview.php deserialization

A security vulnerability has been detected in yuan1994 tpadmin up to 1.3.12. This affects an unknown part in the library /public/static/admin/lib/webuploader/0.1.5/server/preview.php of the component WebUploader. The manipulation leads to deserialization. The attack is possible to be carried out...

7.5CVSS5AI score0.02034EPSS
SaveExploits3References4
Positive Technologies
Positive Technologies
added 2026/02/07 12:00 a.m.15 views

PT-2026-6920

Name of the Vulnerable Software and Affected Versions yuan1994 tpadmin versions up to 1.3.12 Description A security issue exists in yuan1994 tpadmin up to version 1.3.12. The issue is related to deserialization within the WebUploader component, specifically in the file...

9.8CVSS5.3AI score0.02034EPSS
SaveExploits3References12
CNNVD
CNNVD
added 2026/02/07 12:00 a.m.18 views

tpAdmin 代码问题漏洞

tpAdmin is a management backend developed by Ethan as an individual developer, based on ThinkPHP5. Versions of tpadmin 1.3.12 and earlier have code vulnerabilities. These vulnerabilities stem from incorrect operations with the library...

9.8CVSS7.2AI score0.02034EPSS
SaveExploits3References5
RedhatCVE
RedhatCVE
added 2026/01/03 4:02 a.m.28 views

CVE-2025-15426

A vulnerability was identified in jackying H-ui.admin up to 3.1. This affects an unknown function in the library /lib/webuploader/0.1.5/server/preview.php. The manipulation leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit is publicly available and might...

7.5CVSS6.6AI score0.00462EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/02 4:15 a.m.20 views

CVE-2025-15426

A vulnerability was identified in jackying H-ui.admin up to 3.1. This affects an unknown function in the library /lib/webuploader/0.1.5/server/preview.php. The manipulation leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit is publicly available and might...

7.5CVSS0.00462EPSS
SaveExploits0References5
CVE
CVE
added 2026/01/02 3:32 a.m.43 views

CVE-2025-15426

CVE-2025-15426 affects jackying H-ui.admin up to version 3.1. A flaw in the library file /lib/webuploader/0.1.5/server/preview.php allows unrestricted file uploads via a remotely exploitable path. Public PoC exists; vendor reportedly unresponsive. Impact is described as remote arbitrary file uplo...

7.5CVSS7.2AI score0.00462EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/01/02 3:32 a.m.6 views

CVE-2025-15426 jackying H-ui.admin preview.php unrestricted upload

A vulnerability was identified in jackying H-ui.admin up to 3.1. This affects an unknown function in the library /lib/webuploader/0.1.5/server/preview.php. The manipulation leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit is publicly available and might...

7.5CVSS6.3AI score0.00462EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/01/02 3:32 a.m.48 views

CVE-2025-15426 jackying H-ui.admin preview.php unrestricted upload

A vulnerability was identified in jackying H-ui.admin up to 3.1. This affects an unknown function in the library /lib/webuploader/0.1.5/server/preview.php. The manipulation leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit is publicly available and might...

7.5CVSS0.00462EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2025-31490

Malicious code in bioql PyPI...

5.8CVSS5AI score0.00397EPSS
SaveExploits1References5
Rows per page
Query Builder