14789 matches found
NETGEAR ProSAFE 安全漏洞
NETGEAR ProSAFE is a network management system from NETGEAR. An arbitrary file upload vulnerability exists in NETGEAR ProSAFE, which can be exploited by an attacker to execute arbitrary code...
CVE-2024-33786
CVE-2024-33786: An arbitrary file upload vulnerability affects Zhongcheng Kexin Ticketing Management Platform (version 20.04). The exposed flaw allows attackers to execute arbitrary code by uploading a crafted file. Sources consistently reference the product and 20.04, with no explicit fixed vers...
PT-2024-25479 · Unknown · Zhongcheng Kexin Ticketing Management Platform
Name of the Vulnerable Software and Affected Versions: Zhongcheng Kexin Ticketing Management Platform version 20.04 Description: The issue allows attackers to execute arbitrary code via uploading a crafted file, exploiting an arbitrary file upload vulnerability. Recommendations: For Zhongcheng...
NETGEAR ProSAFE 安全漏洞
NETGEAR ProSAFE is a network management system from NETGEAR. An arbitrary file upload vulnerability exists in NETGEAR ProSAFE, which can be exploited by an attacker to execute arbitrary code...
Zhongcheng Kexin Ticketing Management Platform 安全漏洞
Zhongcheng Kexin Ticketing Management Platform Zhongcheng Kexin Ticketing Management Platform is a ticketing management platform from the Chinese company Zhongcheng Kexin Zhongcheng Kexin. A security vulnerability exists in Zhongcheng Kexin Ticketing Management Platform version 20.04, which stems...
CVE-2024-4033 All-in-One Video Gallery <= 3.6.4 - Authenticated (Contributor+) Arbitrary File Upload via featured image
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the aiovgcreateattachmentfromexternalimageurl function in all versions up to, and including, 3.6.4. This makes it possible for authenticated attackers, with contributor...
CVE-2024-4033 All-in-One Video Gallery <= 3.6.4 - Authenticated (Contributor+) Arbitrary File Upload via featured image
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the aiovgcreateattachmentfromexternalimageurl function in all versions up to, and including, 3.6.4. This makes it possible for authenticated attackers, with contributor...
CVE-2024-33913
Cross-Site Request Forgery CSRF vulnerability leading to Arbitrary File Upload in Xserver Migrator.This issue affects Xserver Migrator: from n/a through 1.6.1...
CVE-2024-33913 WordPress Xserver Migrator plugin <= 1.6.1 - CSRF to Arbitrary File Upload vulnerability
Cross-Site Request Forgery CSRF vulnerability leading to Arbitrary File Upload in Xserver Migrator.This issue affects Xserver Migrator: from n/a through 1.6.1...
CVE-2024-33913
CVE-2024-33913 is a CSRF to Arbitrary File Upload vulnerability in the Xserver Migrator WordPress plugin. The issue affects Xserver Migrator versions from <= 1.6.1 (per initial description) and is confirmed as being patched in newer builds (patched status in connected CVE references; Xserver M...
CVE-2024-33913 WordPress Xserver Migrator plugin <= 1.6.1 - CSRF to Arbitrary File Upload vulnerability
Cross-Site Request Forgery CSRF vulnerability leading to Arbitrary File Upload in Xserver Migrator.This issue affects Xserver Migrator: from n/a through 1.6.1...
WordPress Plugin ElementsKit Pro 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2024-25546 · Unknown · Xserver Migrator
Name of the Vulnerable Software and Affected Versions: Xserver Migrator versions 1.6.1 and earlier Description: A Cross-Site Request Forgery CSRF issue leads to Arbitrary File Upload in Xserver Migrator. This allows an attacker to potentially upload arbitrary files. Recommendations: For versions...
XStore Core <= 5.3.5 - Authenticated (Subscriber+) Limited Arbitrary File Upload
Description The XStore Core plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 5.3.5. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary files on the...
All-in-One Video Gallery < 3.6.5 - Contributor+ Arbitrary File Upload via featured image
Description The plugin is vulnerable to arbitrary file uploads due to missing file type validation in the aiovgcreateattachmentfromexternalimageurl function. This makes it possible for authenticated attackers, with contributor access and above, to upload arbitrary files on the affected site's...
WordPress All-in-One Video Gallery Plugin <= 3.6.4 is vulnerable to Arbitrary File Upload
Software All-in-One Video Gallery Type Plugin Vulnerable versions = 3.6.4 Fixed in 3.6.5 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2024-4033 Patch priority Medium CVSS severity Medium 8.8 Developer Claim ownership PSID cfa484cd1cd9 Credits stealthcopter Required...
CVE-2024-33103
An arbitrary file upload vulnerability in the Media Manager component of DokuWiki 2024-02-06a allows attackers to execute arbitrary code by uploading a crafted SVG file. NOTE: as noted in the 4267 issue reference, there is a position that exploitability can only occur with a misconfiguration of t...
CVE-2024-33103
An arbitrary file upload vulnerability in the Media Manager component of DokuWiki 2024-02-06a allows attackers to execute arbitrary code by uploading a crafted SVG file. NOTE: as noted in the 4267 issue reference, there is a position that exploitability can only occur with a misconfiguration of t...
CVE-2024-33103
An arbitrary file upload vulnerability in the Media Manager component of DokuWiki 2024-02-06a allows attackers to execute arbitrary code by uploading a crafted SVG file. NOTE: as noted in the 4267 issue reference, there is a position that exploitability can only occur with a misconfiguration of t...
DokuWiki 安全漏洞
DokuWiki is an easy-to-use and versatile open source Wiki software. A security vulnerability exists in DokuWiki version 2024-02-06a, which stems from an arbitrary file upload vulnerability that allows an attacker to execute arbitrary code by uploading a crafted SVG file...