Lucene search
+L

32392 matches found

Cvelist
Cvelist
added 2025/12/29 9:13 p.m.38 views

CVE-2025-68562 WordPress MapSVG plugin <= 8.7.3 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.7.3...

9.9CVSS0.00365EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/29 9:13 p.m.31 views

CVE-2025-68562

CVE-2025-68562 : MapSVG (Vector/Image/Google Maps)

9.9CVSS5.2AI score0.00365EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/29 9:13 p.m.9 views

CVE-2025-68562 WordPress MapSVG plugin <= 8.7.3 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.7.3...

9.9CVSS6.5AI score0.00365EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/29 7:31 p.m.23 views

CVE-2025-14175

The CVE-2025-14175 entry concerns the SSH server on TP-Link TL-WR820N v2.80, where weak cryptographic algorithm support is reported. The vulnerability enables an adjacent attacker to intercept and decrypt SSH traffic, impacting confidentiality. The CVSS v4.0 vector indicates an adjacent network a...

6.5CVSS6.2AI score0.00322EPSS
SaveExploits1References3Affected Software1
GithubExploit
GithubExploit
added 2025/12/29 6:28 p.m.166 views

Exploit for CVE-2025-15495

CVE-2025-15495 - Arbitrary File Upload Leading to Remote Code...

5.8CVSS7.8AI score0.0042EPSS
SaveExploits2
Fedora
Fedora
added 2025/12/29 5:24 p.m.12 views

[SECURITY] Fedora 42 Update: fluidsynth-2.5.2-1.fc42

FluidSynth is a real-time software synthesizer based on the SoundFont 2 specifications. It is a "software synthesizer". FluidSynth can read MIDI even ts from the MIDI input device and render them to the audio device. It features real-time effect modulation using SoundFont 2.01 modulators, and a...

7CVSS7AI score0.00182EPSS
SaveExploits1
GithubExploit
GithubExploit
added 2025/12/29 4:23 p.m.318 views

Exploit for CVE-2025-52691

CVE-2025-52691 SmarterMail Unauthenticated Arbitrary File U...

10CVSS8.9AI score0.85457EPSS
SaveExploits15
OSV
OSV
added 2025/12/29 10:35 a.m.10 views

CLSA-2025-1767004508 httpd: Fix of CVE-2025-58098

CVE-2025-58098: prevent command injection in modcgid via shell-escaped SSI query strings...

8.3CVSS7.2AI score0.01515EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/29 8:15 a.m.6 views

CVE-2025-15228

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS6.4AI score0.00517EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/29 7:37 a.m.9 views

Security Bulletin: Vulnerability in SSH servers which implement file transfer protocols affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in SSH servers which implement file transfer protocols has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to...

7.5CVSS6.2AI score0.00905EPSS
SaveExploits0Affected Software1
CVE
CVE
added 2025/12/29 7:18 a.m.20 views

CVE-2025-15228

BPMFlowWebkit by WELLTEND TECHNOLOGY is affected by an Arbitrary File Upload vulnerability that enables unauthenticated remote attackers to upload and execute a Web Shell backdoor, leading to arbitrary code execution on the server. Affected component is BPMFlowWebkit; root cause is an arbitrary f...

9.8CVSS8.1AI score0.00517EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/29 7:18 a.m.4 views

CVE-2025-15228 WELLTEND TECHNOLOGY| BPMFlowWebkit - Arbitrary File Upload

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS8.1AI score0.00517EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/29 7:18 a.m.10 views

EUVD-2025-205563

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS8AI score0.00517EPSS
SaveExploits0References3
NVD
NVD
added 2025/12/29 7:15 a.m.10 views

CVE-2025-15226

WMPro developed by Sunnet has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS0.00517EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/29 6:39 a.m.16 views

EUVD-2025-205558

WMPro developed by Sunnet has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS8AI score0.00517EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/29 6:39 a.m.38 views

CVE-2025-15226 Sunnet|WMPro - Arbitrary File Upload

WMPro developed by Sunnet has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS0.00517EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/29 6:39 a.m.18 views

CVE-2025-15226

CVE-2025-15226 concerns WMPro by Sunnet, where an Arbitrary File Upload vulnerability allows unauthenticated remote attackers to upload and execute a web shell on the server, enabling arbitrary code execution . The vulnerability is described in multiple feeds (NVD/Red Hat/CIRCL/etc.) with no spec...

9.8CVSS8.1AI score0.00517EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2025/12/29 1:15 a.m.9 views

CVE-2025-15067

Unrestricted Upload of File with Dangerous Type vulnerability in Innorix Innorix WP allows Upload a Web Shell to a Web Server.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory where the product is installed ex: innorix/exam...

8.5CVSS0.00126EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/29 12:59 a.m.5 views

CVE-2025-15067 Unrestricted File Upload and RCE in Innorix WP

Unrestricted Upload of File with Dangerous Type vulnerability in Innorix Innorix WP allows Upload a Web Shell to a Web Server.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory where the product is installed ex: innorix/exam...

8.5CVSS6.4AI score0.00126EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/29 12:59 a.m.29 views

CVE-2025-15067

CVE-2025-15067 affects Innorix WP. The issue is an Unrestricted Upload of File with Dangerous Type that can allow uploading a Web Shell to the web server when anexam directory exists under the installation path (e.g., innorix/exam). All versions are affected as stated in the initial description. ...

8.5CVSS6.5AI score0.00126EPSS
SaveExploits0References2
Rows per page
Query Builder