534 matches found
WordPress plugin Alex Reservations: Smart Restaurant Booking 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...
CVE-2025-12399: Unrestricted Upload of File with Dangerous Type
The Alex Reservations: Smart Restaurant Booking plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the /wp-json/srr/v1/app/upload/file REST endpoint in all versions up to, and including, 2.2.3. This makes it possible for authenticated attackers, wi...
CVE-2025-20376
The collection shows CVE-2025-20376 affecting Cisco Unified CCX web UI, due to insufficient input validation in the file upload mechanism. An authenticated, remote attacker could upload a malicious file via the web UI and execute arbitrary commands on the underlying system, with potential privile...
Arbitrary File Read
flowise is vulnerable to an arbitrary file read. The vulnerability is due to improper validation of the chatId parameter in the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints, which allows an attacker to read unintended files on the local filesystem and potentially...
EUVD-2018-15809
Malware in sbrugna...
EUVD-2021-19156
Malware in sbrugna...
EUVD-2018-18592
Malware in sbrugna...
EUVD-2012-6584
Malware in sbrugna...
EUVD-2021-22057
Malware in sbrugna...
EUVD-2015-9370
Malware in sbrugna...
EUVD-2017-15599
Malware in sbrugna...
CVE-2025-11318 Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 uploadWxFile.do unrestricted upload
A security flaw has been discovered in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. This vulnerability affects unknown code of the file uploadWxFile.do. The manipulation of the argument File results in unrestricted upload. The attack may be performed from remote. The exploit...
PT-2025-40848
Name of the Vulnerable Software and Affected Versions zhuimengshaonian wisdom-education versions prior to 1.0.5 Description A security issue exists in zhuimengshaonian wisdom-education. The uploadFile function within the file src/main/java/com/education/core/controller/UploadController.java is...
EUVD-2025-19951
Malicious code in bioql PyPI...
EUVD-2023-29678
Malicious code in bioql PyPI...
EUVD-2024-45867
Malicious code in bioql PyPI...
EUVD-2024-45874
Malicious code in bioql PyPI...
EUVD-2022-43370
Malicious code in bioql PyPI...