CVE-2023-28837 Wagtail vulnerable to denial-of-service via memory exhaustion when uploading large files

Wagtail is an open source content management system built on Django. Prior to versions 4.1.4 and 4.2.2, a memory exhaustion bug exists in Wagtail's handling of uploaded images and documents. For both images and documents, files are loaded into memory during upload for additional processing. A use...

CopySafe Web Protection < 3.14 - Unauthenticated Reflected XSS

The plugin does not properly sanitize and escape the file name in it's file uploads functionality before reflecting it back on the page, allowing an unauthenticated attacker to inject arbitrary web scripts via the filename of uploaded files...

PT-2023-21998 · Unknown +3 · Cloudflared +4

Name of the Vulnerable Software and Affected Versions: Wagtail versions prior to 4.1.4 and 4.2.2 Description: A memory exhaustion bug exists in Wagtail's handling of uploaded images and documents. For both images and documents, files are loaded into memory during upload for additional processing....

GLPI Cartography Plugin v6.0.0 - Unauthenticated Remote Code Execution Vulnerability

Exploit Title: GLPI Cartography Plugin v6.0.0 - Unauthenticated Remote Code Execution RCE Application: GLPI Cartography...

Wagtail 跨站脚本漏洞

Torchbox Wagtail is an open source content management system CMS from the UK-based Torchbox. A cross-site scripting vulnerability exists in Wagtail versions 1.5 through 4.1.4, 4.2, and 4.2.1, which stems from a memory exhaustion issue in Wagtail's handling of uploaded images and documents,...

OTCMS 代码问题漏洞

OTCMS Nettie CMS is an article-based web content management system CMS. A security vulnerability exists in OTCMS version 6.0.1, which originates from an unknown function in the file sysCheckFile.php?mudi=sql, resulting in unrestricted uploads...

PT-2023-2274 · Otcms · Otcms

Name of the Vulnerable Software and Affected Versions: OTCMS version 6.0.1 Description: A critical vulnerability was found in OTCMS, related to the absence of restrictions on file uploads. This issue affects an unknown functionality of the file sysCheckFile.php, where the mudi parameter is set to...

CVE-2023-23594

An authentication bypass vulnerability in the web client interface for the CL4NX printer before firmware version 1.13.3-u724r2 provides remote unauthenticated attackers with access to execute commands intended only for valid/authenticated users, such as file uploads and configuration changes...

Authentication flaw

An authentication bypass vulnerability in the web client interface for the CL4NX printer before firmware version 1.13.3-u724r2 provides remote unauthenticated attackers with access to execute commands intended only for valid/authenticated users, such as file uploads and configuration changes...

Gladinet CentreStack 代码问题漏洞

Gladinet CentreStack is a premier mobile access and secure sharing solution from Gladinet USA. Provides self-hosted cloud storage. A security vulnerability exists in Gladinet CentreStack versions prior to 13.5.9808. An attacker could exploit the vulnerability to execute arbitrary code by uploadin...

CVE-2023-23594

An authentication bypass vulnerability in the web client interface for the CL4NX printer before firmware version 1.13.3-u724r2 provides remote unauthenticated attackers with access to execute commands intended only for valid/authenticated users, such as file uploads and configuration changes...

Security fix for the ALT Linux 10 package python3-module-django version 3.2.18-alt1

3.2.18-alt1 built March 31, 2023 Alexey Shabalin in task 317508 March 24, 2023 Alexey Shabalin - New version 3.2.18. - Fixes for the following security vulnerabilities: + CVE-2023-23969 Potential denial-of-service via Accept-Language headers + CVE-2023-24580 Potential denial-of-service...

CVE-2023-23594: Incorrect Authorization

An authentication bypass vulnerability in the web client interface for the CL4NX printer before firmware version 1.13.3-u724r2 provides remote unauthenticated attackers with access to execute commands intended only for valid/authenticated users, such as file uploads and configuration changes...

PT-2023-19066 · Cl4Nx · Cl4Nx

Name of the Vulnerable Software and Affected Versions: CL4NX printer versions prior to 1.13.3-u724 r2 Description: An authentication bypass issue in the web client interface of the CL4NX printer allows remote unauthenticated attackers to execute commands intended for valid and authenticated users...

Acyba AcyMailing 代码问题漏洞

Acyba AcyMailing is a suite of newsletter and marketing automation software from the Acyba team in France. A security vulnerability exists in Acyba AcyMailing versions prior to 8.3.0, which stems from incorrect input validation leading to the unrestricted upload of dangerous files...

Simple and Beautiful Shopping Cart System 代码问题漏洞

Simple and Beautiful Shopping Cart System is an e-commerce platform. A code issue vulnerability exists in SourceCodester Simple and Beautiful Shopping Cart System version 1.0. An attacker could exploit the vulnerability to cause unrestricted uploads...

IBOS 代码问题漏洞

IBOS is a collaborative office management system. A code issue vulnerability exists in IBOS version 4.5.5. An attacker exploited the vulnerability to cause unrestricted uploads...

Young Entrepreneur E-Negosyo System 代码问题漏洞

Young Entrepreneur E-Negosyo System is a Young Entrepreneur E-Negosyo System for janobe individual developers. A security vulnerability exists in version 1.0 of the SourceCodester Young Entrepreneur E-Negosyo System that stems from an incorrect manipulation of the parameter image resulting in...

PT-2023-2469 · Nextcloud +2 · Nextcloud Server +2

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 24.0.10 Nextcloud Server versions prior to 25.0.4 Description: The issue is related to the lack of restrictions on file uploads in the Nextcloud server, allowing administrators to upload a logo or favicon wi...

HadSky 代码问题漏洞

HadSky is an original open source php light forum system from China's HadSky company. A security vulnerability exists in HadSky version 7.7.16, which stems from the presence of unrestricted uploads...