#PHP

exploit 2026-08-28

OJS Author Vulnerability Could Allow Arbitrary File Deletion Through coverImage.uploadName

A security vulnerability in Open Journal Systems (OJS) could allow an authenticated Author to influence the filesystem path used when deleting a publication cover image. The issue can lead to arbitrary file deletion within the permissions available to the OJS process and could cause severe application disruption if sensitive application files are affected.

7 min read read

exploit 2026-08-25

Vebto Platform: Unauthenticated RCE via Social Authentication Bypass and Upload Controls

The Vebto Platform research repository documents a multi-stage unauthenticated remote code execution chain affecting the shared foundation used by products such as BeLink, BeDesk, BeDrive, BeMusic, MTDB, and Architect. The chain combines a social-authentication bypass with unsafe file-storage contro...

4 min read read

exploit 2026-08-25

Acelle Mail 4.2.0-p97: Unauthenticated SSTI to RCE Chain

The Acelle Mail research repository documents a multi-stage unauthenticated remote code execution chain affecting version 4.2.0-p97. The chain combines public account creation, subscription assignment, authentication bypass, unsafe Twig template processing, and a public campaign-preview route.

4 min read read

exploit 2026-08-25

Acelle Mail ≤ 4.0.24: Unauthenticated Path Traversal to RCE Chain

The Acelle Mail research repository documents a multi-stage unauthenticated compromise chain affecting versions through 4.0.24. The chain begins with arbitrary file disclosure through path traversal and can escalate through exposed application secrets, authentication weaknesses, and unsafe file-writ...

4 min read read

exploit 2026-08-19

Perfex CRM ≤ 3.4.x: Unauthenticated RCE via Cookie Deserialization

The Perfex CRM research repository documents an unauthenticated remote code execution chain caused by unsafe deserialization of the autologin cookie. The chain abuses attacker-controlled serialized data and a gadget capable of writing arbitrary content to a filesystem path.

4 min read read

exploit 2026-08-18

Perfex CRM ≤ 3.4.x: Unauthenticated RCE via Migration SQLi and Arbitrary File Upload

The Perfex CRM research repository documents a multi-stage unauthenticated compromise chain affecting versions through 3.4.x. The chain combines an unauthenticated SQL injection in the migration controller with sensitive-token extraction and an unsafe sales-attachment upload path.

4 min read read

exploit 2026-08-17

Responsive FileManager ≤ 9.14.0: Authenticated RCE via Path Traversal and Arbitrary File Write

The Responsive FileManager research repository documents an authenticated remote code execution issue affecting versions through 9.14.0. The vulnerable save_img functionality can combine insufficient filename validation with path traversal to write attacker-controlled content into a web-accessible l...

4 min read read

CVE 2026-06-09

CVE-2025-6254: Unauthenticated Administrator Registration in Doctreat Core

CVE-2025-6254 affects the Doctreat Core WordPress plugin through version 1.6.8. The vulnerability allows unauthenticated attackers to register an account with administrator privileges because the registration handler does not properly restrict the requested role.

4 min read read

CVE 2026-05-20

CVE-2026-5118: Unauthenticated Privilege Escalation in Divi Form Builder

CVE-2026-5118 affects Divi Form Builder through version 5.1.2. The vulnerability allows unauthenticated attackers to create administrator accounts by manipulating the role value accepted during public form registration.

4 min read read