Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-102245. PoCs published by Vulnerability-Lab.
AI-analyzed exploit summary This exploit demonstrates an arbitrary file upload vulnerability in HardDrive v2.1 for iOS, allowing remote attackers to bypass file extension checks and upload malicious files (e.g., webshells) via the `upload` POST method. The PoC shows how an attacker can upload a file with a deceptive extension (e.g., `exploit.html.js.png`) and later access it with a modified extension to execute arbitrary code.
Description
HardDrive 2.1 for iOS - Arbitrary File Upload
Exploits (1)
This exploit demonstrates an arbitrary file upload vulnerability in HardDrive v2.1 for iOS, allowing remote attackers to bypass file extension checks and upload malicious files (e.g., webshells) via the `upload` POST method. The PoC shows how an attacker can upload a file with a deceptive extension (e.g., `exploit.html.js.png`) and later access it with a modified extension to execute arbitrary code.