#fileupload — Public Fediverse posts

CVE-2026-14894, a critical Super Forms vulnerability, is exploited in the wild. The 9.8 CVSS file upload flaw enables unauthenticated remote code execution.

#SuperForms #WordPress #CVE202614894 #RCE #FileUpload #WebSecurity #InfoSec #ExploitedInTheWild

https://securityonline.info/super-forms-cve-2026-14894-rce/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-32475 (CVSS 9.8) is an unauthenticated file upload flaw in Elementor Pro. It threatens complete site compromise across 6 million sites.

#ElementorPro #CVE202632475 #WordPress #RCE #FileUpload #WebSecurity

https://securityonline.info/cve-2026-32475-elementor-pro-file-upload/?utm_source=mastodon&utm_medium=jetpack_social

🔐 Bài viết ngắn về Secure Coding: hướng dẫn thực hành khắc phục lỗ hổng IDOR, tải file không an toàn và SQL Injection qua ví dụ lab. Rất hữu ích cho lập trình viên muốn nâng cao bảo mật mã nguồn. #SecureCoding #BảoMật #IDOR #SQLInjection #FileUpload #LậpTrình

https://www.reddit.com/r/programming/comments/1q8m817/a_very_short_introduction_to_secure_coding_with/

Bài viết phân tích cơ chế upload file trong Immich (Phần 2):
• FileUploadHandler xử lý upload và kiểm tra định dạng file
• UploadExecutionQueue quản lý hàng đợi với cơ chế concurrency
• FileUploader sử dụng XMLHttpRequest để tải dữ liệu thực tế
• Kiểm tra SHA-1 và xử lý duplicate trước khi upload
Codebase thể hiện thiết kế module rõ ràng với store pattern

#Immich #FileUpload #LậpTrình #WebDevelopment
#TảiLênTệp #PhátTriểnWeb #CôngNghệ #VietnamTech

https://dev.to/ramunarasinga-11/

Thú thật: Mệt mỏi vì giới hạn tải file lên ChatGPT, người dùng đã tạo một extension để giải quyết vấn đề này. Công cụ giúp bạn vượt giới hạn file, chia tệp lớn thành các phần để tải lên dễ dàng. 100% miễn phí! #ChatGPT #FileUpload #CôngCụ HữuÍch #TechVinh

https://www.reddit.com/r/SideProject/comments/1pqk6fj/i_got_annoyed_of_always_hitting_the_file_upload/

🔍 ZAST.AI discovered vulnerabilities in Node-formidable (10M+ weekly downloads):
• Insecure File Upload & Filename Prediction (CVE-2025-46653)
These flaws could lead to remote code execution and server resource access.
🔗 Detailed report: https://tinyurl.com/3rrta8nw
#NodeJS #CVE #FileUpload #Cybersecurity #Formidable

Sharing my terminal file upload scripts!
Pick your service, select files with fzf, done. URLs auto-copied to clipboard.
4 services supported: uguu • 0x0 • catbox • litterbox
Complete guide: https://rentry.org/file-upload-scripts
#workflow #automation #bash #fileupload #productivity

„#FileUpload done.“ Wirklich? Doch was ist mit Path Traversal, unsicheren temp files & #Logging? @svenruppert zeigt, wie #Java Uploads mit #Vaadin Flow & NIO sicher werden - gegen CWE-22 #CWE-377 & CWE-778.

Lese: https://javapro.io/de/erstellen-einer-einfachen-datei-up-download-anwendung-mit-vaadin-flow/

#SecureCoding #WebDev #DevSecOps @vaadin

One Open-source Project Daily

Blazing fast file vault written in TypeScript! 🚀

https://github.com/chibisafe/chibisafe

#1ospd #opensource #chibisafe #file #fileupload #fileuploader #files #fileuploader #js #node #pomf #screenshots #upload #uploader #video

SFTP Meets PostgreSQL: Building a Smart File Upload System with Quarkus Dev Services
Most file-handling tutorials stop at REST endpoints and a local filesystem.
https://myfear.substack.com/p/quarkus-sftp-postgresql-file-upload-tutorial
#Java #Quarkus #SFTP #FileUpload #ComposeDevServices

Datei-Uploads sind oft unterschätzte Angriffspunkte in #Java Webanwendungen. Path Traversal, unsichere temporäre Dateien & fehlendes #Logging öffnen Tür & Tor.

Lerne, wie @svenruppert gezielt mit #Vaadin Flow absichert: https://javapro.io/de/erstellen-einer-einfachen-datei-up-download-anwendung-mit-vaadin-flow/

#CyberSecurity #CWE #FileUpload

Noch nie von #CWE-22, CWE-377, CWE-778 gehört? Dann könnte dein nächster Datei-Upload in #Java zur Sicherheitslücke werden.
@svenruppert hat praktische Abhilfe parat.

Jetzt absichern: https://javapro.io/de/erstellen-einer-einfachen-datei-up-download-anwendung-mit-vaadin-flow/

#WebDev #DevSecOps #Vaadin #SecureCoding #Logging #FileUpload

🚨BREAKING NEWS: #Nextcloud for #Android loses file upload feature! 😱 Everyone, sound the alarms! 🔔 The app that once allowed file uploads now just... doesn't. But hey, don't worry, they've got more pressing matters like their 2025 events and awards, because that's obviously what every user cares about while trying to upload a file. 🙄📂
https://nextcloud.com/blog/nextcloud-android-file-upload-issue-google/ #FileUpload #Loss #BreakingNews #UserFrustration #TechNews #HackerNews #ngated

The recently lost file upload feature in the Nextcloud app for Android

https://nextcloud.com/blog/nextcloud-android-file-upload-issue-google/

#HackerNews #Nextcloud #Android #FileUpload #Issue #NextcloudApp #TechNews #MobileApps

If you are all looking for a good place to upload your #images, I recommend #cubeupload

https://cubeupload.com/

Highly recommended to donate to them. I use it everywhere in the #MelonlandForum

#fileuploading #fileupload #forum #forums #uploading #imageuploading #upload #imageuploading #imageupload #imgupload #imguploading #img #image

🚀 Ready to level up your automation game? Here’s how to create smart agents in Microsoft Copilot Studio that can read and respond to file uploads—right in chat!

👨‍💻 Boost Efficiency: Automate document reviews with the power of Microsoft Copilot Studio! Chat agents can now handle file uploads effortlessly.

🔍 Analyze Seamlessly: Easily analyze content using Power Automate and AI Builder—ideal for files like CVs and expenses.

🚀 Simplify Integration: Save files and summaries directly to SharePoint, perfectly synced with Microsoft Teams.

Use tools like Power Fx and OCR to unlock powerful scenarios—think resume screening, invoice handling, and more!

Catch the full guide + demos here:
👉 https://www.hubsite365.com/en-ww/citizen-developer/?id=4fb99b92-1b1d-f011-9989-7c1e5212aa95&topic=9f678e9a-8cd4-ec11-a7b5-6045bd92fe52&theater=true

#CopilotStudio #FileUpload #Automation #PowerAutomate #MicrosoftTeams

CSV import tutorial explains the process of adding many2many fields in CSV files for Odoo. Follow clear steps for file upload, extraction, mapping, and troubleshooting. #Odoo #CSVImport #Many2Many #Tutorial #FileUpload

https://teguhteja.id/csv-import-tutorial-how-to-add-many2many-field-odoo/

Learn how to add binary fields in XML files within Odoo! This tutorial covers creating records, handling different field types, and managing file uploads in Odoo. #Odoo #OdooTutorial #BinaryField #XML #FileUpload #OdooDevelopment #TechTutorial

https://teguhteja.id/odoo-xml-adding-binary-fields/

Imagine uploading a file into Google Search and asking it questions like “What are the key points in this document?” Rumour has it Google’s testing this out. How could it save time for your business?

#GoogleSearch #FileUpload #TimeSaver https://www.neowin.net/news/google-search-may-soon-let-you-upload-files-to-ask-questions/

Video on the latest research of @themiddle.

https://youtu.be/CxLPZDtr-d0

#cybersecurity #security #infosec #hacking #appsec #applicationsecurity #waf #webapplicationfirewall #multipart #fileupload #bypass

Breaking Down Multipart Parsers: File upload validation bypass - @themiddle

https://blog.sicuranext.com/breaking-down-multipart-parsers-validation-bypass/

#cybersecurity #security #infosec #hacking #appsec #applicationsecurity #waf #webapplicationfirewall #multipart #fileupload #bypass

Great news to all CrateDB Cloud users 🎉 With our new feature, you can now easily upload files directly from your computer 👨‍💻

Try it out now to enjoy benefits of increased data security, as well as cost savings on third-party storage ✅

Start CrateDB Cloud for free 👉 https://hubs.ly/Q01N1pBF0
Deploy a cluster that is free.
No credit card info needed 👉 https://hubs.ly/Q01N1p1f0

#cratedb #db #database #cratedbcloud #cloud #cloudcomputing #fileupload #newfeature #release #freetrial

Bypass file upload limits [closed]

https://security.stackexchange.com/questions/269309/bypass-file-upload-limits

#fileupload

I'm uploadin' an 18 Gb file now! 😬

Wish me luck! :blobcatgiggle:​

#FileUpload

Does Burp Suite affect my request directly?

https://security.stackexchange.com/questions/268007/does-burp-suite-affect-my-request-directly

#fileinclusion #fileupload #burpsuite

Dieser #xkcd ist mindestens 11 Jahre alt. Als wir in der AG Digitale Selbstverteidigung von @digitalcourage darüber diskutierten, welche Datei-Transfer-Dienste wir empfehlen können, wurde mir klar, dass er immer noch aktuell ist.

Unser vorläufiges Ergebnis: Der 2020 von Mozilla eingestellte Dienst „Firefox Send“ ist die einzige für die Allgemeinheit empfehlenswerte privatsphärewahrende Möglichkeit. Zum Glück gibt es weiterhin #Send-Instanzen, die von Enthusiast:innen betrieben werden: https://digitalcourage.de/digitale-selbstverteidigung/online-zusammen-arbeiten#dateien-tauschen

(Edit: Das bei @Framasoft entwickelte #Lufi ist ähnlich gut. Wie konnte mir das entfallen?)

Persönlich bin ich ein Fan von #OnionShare. Als ich das bei einer #CryptoParty vorstellte, kamen die Teilnehmenden großartig damit klar. Allerdings hatten sie #Tails zur Verfügung, wo dieses Tool vorinstalliert ist.

Der Original-Comic: https://xkcd.com/949/

Erklärungen dazu: https://explainxkcd.com/949/

#FileTransfer #DateiTransfer #FileUpload #DateiUpload #DateienTausch #DateiAustausch