New that day
- highpatchedexploited Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability Balbooa Forms contains an unrestricted upload of file with dangerous type vulnerability that allows an unauthenticated arbitrary file upload which could allow uploading of executable files leading to full RCE. Added to CISA KEV on 2026-07-10 (federal deadline 2026-07-13).
- highpatchedexploited iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability iCagenda iCagenda iCagenda contains an unrestricted upload of file with dangerous type vulnerability that allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution. Added to CISA KEV on 2026-07-10 (federal deadline 2026-07-13).