diff --git a/README-jp.md b/README-jp.md
index 4463794..bb46ca4 100644
--- a/README-jp.md
+++ b/README-jp.md
@@ -32,6 +32,7 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
   - [SSRF](#ssrf---server-side-request-forgery)
   - [Web Cache Poisoning](#web-cache-poisoning)
   - [Open Redirect](#open-redirect)
+  - [Upload](#upload)
   - [Rails](#rails)
   - [AngularJS](#angularjs)
   - [ReactJS](#reactjs)
@@ -191,6 +192,11 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
 
 - [Open Redirect Vulnerability](https://s0cket7.com/open-redirect-vulnerability/) - Written by [s0cket7](https://s0cket7.com/).
 
+<a name="upload"></a>
+### Upload
+
+- [File Upload Restrictions Bypass](https://www.exploit-db.com/docs/english/45074-file-upload-restrictions-bypass.pdf) - Written by [Haboob Team](https://www.exploit-db.com/author/?a=9381).
+
 <a name="rails"></a>
 ### Rails
 
diff --git a/README-zh.md b/README-zh.md
index 771e3ab..b209435 100644
--- a/README-zh.md
+++ b/README-zh.md
@@ -32,6 +32,7 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
   - [SSRF](#ssrf---server-side-request-forgery)
   - [Web Cache Poisoning](#web-cache-poisoning)
   - [Open Redirect](#open-redirect)
+  - [Upload](#upload)
   - [Rails](#rails)
   - [AngularJS](#angularjs)
   - [ReactJS](#reactjs)
@@ -204,6 +205,11 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
 
 - [Open Redirect Vulnerability](https://s0cket7.com/open-redirect-vulnerability/) - Written by [s0cket7](https://s0cket7.com/).
 
+<a name="upload"></a>
+### Upload
+
+- [File Upload Restrictions Bypass](https://www.exploit-db.com/docs/english/45074-file-upload-restrictions-bypass.pdf) - Written by [Haboob Team](https://www.exploit-db.com/author/?a=9381).
+
 <a name="rails"></a>
 ### Rails
 
diff --git a/README.md b/README.md
index 877e1c8..1a3da93 100644
--- a/README.md
+++ b/README.md
@@ -32,6 +32,7 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
   - [SSRF](#ssrf---server-side-request-forgery)
   - [Web Cache Poisoning](#web-cache-poisoning)
   - [Open Redirect](#open-redirect)
+  - [Upload](#upload)
   - [Rails](#rails)
   - [AngularJS](#angularjs)
   - [ReactJS](#reactjs)
@@ -188,6 +189,11 @@ If you enjoy this awesome list and would like to support it, check out my [Patre
 
 - [Open Redirect Vulnerability](https://s0cket7.com/open-redirect-vulnerability/) - Written by [s0cket7](https://s0cket7.com/).
 
+<a name="upload"></a>
+### Upload
+
+- [File Upload Restrictions Bypass](https://www.exploit-db.com/docs/english/45074-file-upload-restrictions-bypass.pdf) - Written by [Haboob Team](https://www.exploit-db.com/author/?a=9381).
+
 <a name="rails"></a>
 ### Rails