Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-106432. PoCs published by Ihsan Sencan.
AI-analyzed exploit summary The exploit describes an arbitrary file upload vulnerability in DeWorkshop 1.0, where the application fails to validate file extensions during profile picture uploads, allowing attackers to upload malicious files. The vulnerability is demonstrated via a proof-of-concept URL and code snippet showing the insecure file handling logic.
Description
DeWorkshop 1.0 - Arbitrary File Upload
Exploits (1)
The exploit describes an arbitrary file upload vulnerability in DeWorkshop 1.0, where the application fails to validate file extensions during profile picture uploads, allowing attackers to upload malicious files. The vulnerability is demonstrated via a proof-of-concept URL and code snippet showing the insecure file handling logic.