CVE-2022-29464: WSO2 Arbitrary File Upload
An arbitrary file upload vulnerability in WSO2 products, used by Evooo1Bot.
Tag: file upload
Active Storage: File Upload Service for Rails
Active Storage is a Ruby on Rails component for handling file uploads. It is affected by CVE-2026-66066, which allows unauthenticated attackers to…
CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence…
SP Page Builder: JoomShaper Page Builder
SP Page Builder by JoomShaper is a Joomla page builder affected by CVE-2026-48908, an unrestricted file upload vulnerability allowing unauthenticated PHP code…
CVE-2026-33691: Progress Kemp LoadMaster WAF Bypass via Whitespace Padding
A high-severity flaw in Progress Kemp LoadMaster allows WAF bypass by using whitespace padding in filenames to circumvent file upload extension checks.