exploit

exploit 2026-08-28

OJS Author Vulnerability Could Allow Arbitrary File Deletion Through coverImage.uploadName

A security vulnerability in Open Journal Systems (OJS) could allow an authenticated Author to influence the filesystem path used when deleting a publication cover image. The issue can lead to arbitrary file deletion within the permissions available to the OJS process and could cause severe application disruption if sensitive application files are affected.

7 min read read

exploit 2026-08-25

Vebto Platform: Unauthenticated RCE via Social Authentication Bypass and Upload Controls

The Vebto Platform research repository documents a multi-stage unauthenticated remote code execution chain affecting the shared foundation used by products such as BeLink, BeDesk, BeDrive, BeMusic, MTDB, and Architect. The chain combines a social-authentication bypass with unsafe file-storage contro...

4 min read read

exploit 2026-08-25

Acelle Mail 4.2.0-p97: Unauthenticated SSTI to RCE Chain

The Acelle Mail research repository documents a multi-stage unauthenticated remote code execution chain affecting version 4.2.0-p97. The chain combines public account creation, subscription assignment, authentication bypass, unsafe Twig template processing, and a public campaign-preview route.

4 min read read

exploit 2026-08-25

Acelle Mail ≤ 4.0.24: Unauthenticated Path Traversal to RCE Chain

The Acelle Mail research repository documents a multi-stage unauthenticated compromise chain affecting versions through 4.0.24. The chain begins with arbitrary file disclosure through path traversal and can escalate through exposed application secrets, authentication weaknesses, and unsafe file-writ...

4 min read read

exploit 2026-08-19

Perfex CRM ≤ 3.4.x: Unauthenticated RCE via Cookie Deserialization

The Perfex CRM research repository documents an unauthenticated remote code execution chain caused by unsafe deserialization of the autologin cookie. The chain abuses attacker-controlled serialized data and a gadget capable of writing arbitrary content to a filesystem path.

4 min read read

exploit 2026-08-18

Perfex CRM ≤ 3.4.x: Unauthenticated RCE via Migration SQLi and Arbitrary File Upload

The Perfex CRM research repository documents a multi-stage unauthenticated compromise chain affecting versions through 3.4.x. The chain combines an unauthenticated SQL injection in the migration controller with sensitive-token extraction and an unsafe sales-attachment upload path.

4 min read read

exploit 2026-08-17

Responsive FileManager ≤ 9.14.0: Authenticated RCE via Path Traversal and Arbitrary File Write

The Responsive FileManager research repository documents an authenticated remote code execution issue affecting versions through 9.14.0. The vulnerable save_img functionality can combine insufficient filename validation with path traversal to write attacker-controlled content into a web-accessible l...

4 min read read

exploit 2025-08-11

XSender: Authenticated Arbitrary File Upload via Support Ticket Attachment

Authenticated Arbitrary File Upload via Support Ticket Attachment

4 min read read

exploit 2025-08-10

ApexForum: Authenticated Arbitrary File Upload to Remote Code Execution

The ApexForum research repository documents an authenticated arbitrary file upload vulnerability in a Laravel-based forum application. The upload endpoint does not adequately validate file type and can store dangerous content in a publicly accessible directory.

4 min read read