CVE-2026-24729

An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execute arbitrary system commands via a malicious class file...

CVE-2026-24728

A missing authentication for critical function vulnerability in the /servlet/baServer3 endpoint of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to access exposed administrative functionality without prior authentication...

CVE-2026-24729

An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execute arbitrary system commands via a malicious class file...

CVE-2026-24729 Interinfo DreamMaker - Unrestricted Upload of File with Dangerous Type

An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execute arbitrary system commands via a malicious class file...

EUVD-2026-5017

An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execute arbitrary system commands via a malicious class file...

CVE-2026-24729

An unrestricted upload of file with dangerous type vulnerability exists in Interinfo DreamMaker’s file upload function, affecting versions before 2025/10/22. The root cause is an insufficient validation of uploaded files, enabling remote attackers to execute arbitrary system commands via a malici...

CVE-2026-24728

The vulnerability CVE-2026-24728 affects Interinfo DreamMaker, specifically the /servlet/baServer3 endpoint. A missing authentication for a critical function allows remote attackers to access exposed administrative functionality without prior authentication in DreamMaker versions before 2025/10/2...

EUVD-2026-5016

A missing authentication for critical function vulnerability in the /servlet/baServer3 endpoint of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to access exposed administrative functionality without prior authentication...

PT-2026-5377

A missing authentication for critical function vulnerability in the /servlet/baServer3 endpoint of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to access exposed administrative functionality without prior authentication...

GHSA-VR63-X8VC-M265

creationtimestamp| type| source ---|---|--- 2025-10-22 21:44:39+00:00| seen| Telegram/x7Jwej06OeHguX67d2-wzz8ZsDylBHQmD5x1XvmhVKLRa4...

CVE-2025-62513

creationtimestamp| type| source ---|---|--- 2025-10-22 21:35:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3ssg2xkk32f 2025-11-01 14:42:20+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m4l7ylsf2s25...

CVE-2025-59800

creationtimestamp| type| source ---|---|--- 2025-10-22 21:32:43+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3m3ssbbtafa2q 2026-01-28 12:05:17+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mdiaarqtys2s...

CVE-2025-59799

creationtimestamp| type| source ---|---|--- 2025-10-22 21:32:43+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3m3ssbbtafa2q 2025-11-20 16:23:52+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m636jktlec25 2026-01-28 12:05:16+00:00| seen|...

CVE-2025-24934

creationtimestamp| type| source ---|---|--- 2025-10-22 21:31:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3ss6ct3jn2o...

CVE-2020-10257

creationtimestamp| type| source ---|---|--- 2025-10-22 21:02:33+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3sqld3yws2i...

CVE-2024-6425

creationtimestamp| type| source ---|---|--- 2025-10-22 20:44:08+00:00| seen| Telegram/lNwmHI9QtWTjqdXH2Nb9-tYi96MKdL2x1UOW-7PHnLqtHQ...

CVE-2025-60225

creationtimestamp| type| source ---|---|--- 2025-10-22 20:11:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3snpjrnbh2m 2025-10-23 01:06:05+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3t66rzvrp26...

CVE-2025-58955

creationtimestamp| type| source ---|---|--- 2025-10-22 20:06:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3snglesu42m...

CVE-2025-62659

creationtimestamp| type| source ---|---|--- 2025-10-22 19:44:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3sm7dcryx2e...

CVE-2025-53053

creationtimestamp| type| source ---|---|--- 2025-10-22 19:43:47+00:00| seen| Telegram/HDy23nd6DJ0ZvWeyuyZBSHGsIi6f8Hao62pSyyQVtp5Qlc...