CVE-2023-38836
File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header to bypass MIME type c
CVSS
8.8
Alta
EPSS
76.0%
p100
KEV
—
Exploit Today
30
0-100
Publicado: 21 de ago. de 2023 · Última mod.: 9 de jul. de 2026 · CWE-434
76.0%EPSS · 30 dias76.0%
2026-10-092026-11-06
File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header to bypass MIME type checks.
- packetstormsecurity.comhttp://packetstormsecurity.com/files/175026/BoidCMS-2.0.0-Shell-Upload.html
- github.comhttps://github.com/BoidCMS/BoidCMS/issues/27
- packetstormsecurity.comhttp://packetstormsecurity.com/files/175026/BoidCMS-2.0.0-Shell-Upload.html
- github.comhttps://github.com/BoidCMS/BoidCMS/issues/27
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-464295.5 MÉD—
——0GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to 5.0.3, specially crafted requests can circumvent GeoNode upload service validation, allowing a low-privileged remote user to store and serve malicious files. This issue is fixed in version 5.0.3.5hCVE-2026-80302——
——0Insufficient isolation in the Avast sandbox file virtualization layer on Windows allows a local, low-privileged attacker executing inside the sandbox to write arbitrary files outside sandbox containment and execute code on the host.
The sandbox virtualizes file system operations by intercepting write requests to protected system directories. However, the virtualization implementation fails to properly validate write targets in certain edge cases, allowing writes to bypass the virtualization redirection and reach the actual host file system in protected locations.
An attacker can exploit this to overwrite executable files, system libraries, or startup configurations with arbitrary content, leading to code execution with host privileges on subsequent system operations or reboot.11hCVE-2026-928958.1 ALT—
——0The Live2DWebCanvas plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.2.1 via the download_one_file function. This is due to missing file extension whitelist and MIME type validation in download_one_file() when writing files derived from attacker-controlled manifest entries to the web-served plugin directory. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible when the plugin's apiType setting is configured as custom-local (self-hosted model mode), a non-default option that requires a paid license and prints the REST nonce and one-time session tokens into every front-end page.11hCVE-2026-11842310.0 CRÍ47.3%
——14The WP Libre Form WordPress plugin 1.5.0.1 does not validate the type of files uploaded through its form submissions, allowing unauthenticated attackers to upload PHP files to a web-accessible location and execute them, leading to remote code execution.7hCVE-2026-1220477.3 ALT22.2%
——7A security vulnerability has been detected in Campcodes Complete Advance Loan Management System 1.0. This affects the function move_uploaded_file of the file /loan/application/banner.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.2dCVE-2026-1221209.0 CRÍ43.9%
——13In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be exploited by attackers to achieve remote code execution.1d