共收录 549 条相关情报。
← 返回所有主题CVE-2026-81931
Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow CRM before 5.16.0 al
CVE-2026-78274
Editor Arbitrary File Upload in Fluent Boards Pro <= 2.0.11 versions.
CVE-2026-77991
Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1 - The admin
CVE-2026-77991
Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1 - The admin
CVE-2026-77018
The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor validate
CVE-2026-80050
ContiNew Admin fails to apply file-upload permission checks or file-type allowlist validation to multipart upload endpoi
CVE-2026-55419
Reachy Mini is an SDK for controlling Reachy Mini robots. Prior to 1.8.2, the Reachy Mini daemon exposes the /api/media/
CVE-2026-55419
## Summary The Reachy Mini daemon exposes the “/api/media/sounds/upload” endpoint without authentication and file valid
CVE-2026-75496
Webkul QloApps does not perform proper validation on uploaded file extensions or MIME types before moving the file to a
CVE-2026-16286
Unrestricted upload of file with dangerous type vulnerability in TRtek Technological Products Computer Software Hardware
CVE-2026-79670
Ech0 before 4.4.3 contains a stored cross-site scripting vulnerability in the file upload endpoint that validates Conten
CVE-2026-16601
The CM Map Locations – Visualize and share your locations in a few clicks plugin for WordPress is vulnerable to Limited
CVE-2026-32559
Subscriber Arbitrary File Upload in UltimateAI <= 3.1.0 versions.
CVE-2026-32559
Subscriber Arbitrary File Upload in UltimateAI <= 3.1.0 versions.
CVE-2026-78337
Unrestricted Upload of File with Dangerous Type in the company logo upload in Roskus Prospero Flow CRM before 5.15.13 al
CVE-2026-78245
A flaw has been found in itsourcecode Online Pharmacy System 1.0. This affects the function move_uploaded_file of the fi
CVE-2026-78202
A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function save_settings of the file admin_
CVE-2026-19852
NewSiteServer (NSS) developed by CyberTutor has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers
CVE-2026-49849
xShop is an open-source shop developed in Laravel. An Unrestricted File Upload vulnerability in xShop version 3.0.3 allo
CVE-2026-77681
A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown function