14805 matches found
CVE-2023-4300 Import XML and RSS Feeds < 2.1.4 - Admin+ Arbitrary File Upload
The Import XML and RSS Feeds WordPress plugin before 2.1.4 does not filter file extensions for uploaded files, allowing an attacker to upload a malicious PHP file, leading to Remote Code Execution...
WordPress plugin Prevent files / folders access code issue vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in the...
D-Link DAR-8000 Code Issue Vulnerability
D-Link DAR-8000 is an Internet behavior auditing gateway from China Youxun D-Link. A code issue vulnerability exists in D-Link DAR-8000 20151231 and earlier versions, which stems from an arbitrary file upload vulnerability in the parameter fileupload in the file /sysmanage/changelogo.php...
D-Link DAR-7000 Code Issue Vulnerability
D-Link DAR-7000 is an Internet Behavior Audit Gateway from China Youxun D-Link. A code issue vulnerability exists in the D-Link DAR-7000 and DAR-8000, which stems from an arbitrary file upload vulnerability in the parameter fileupload of file/useratte/web...
SUSE CVE-2023-41626
Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface...
Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload
Description The plugin does not validate signatures when creating them on the server from user input, allowing unauthenticated users to create arbitrary files and lead to RCE PoC On a page where there is a form with a Signature field, run the following code in the web developer console while...
GHSA-V4Q9-QGQF-7JWP Gradio arbitrary file upload vulnerability
Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface...
Gradio arbitrary file upload vulnerability
Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface...
CVE-2023-41626
Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface...
CVE-2023-41626
Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface...
Design/Logic Flaw
Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface...
CVE-2023-41626
Summary: CVE-2023-41626 affects Gradio v3.27.0, with a vulnerability that allows arbitrary file upload via the /upload interface. The connected sources confirm that this is an arbitrary file upload issue, but do not provide explicit exploit details, affected ranges beyond Gradio v3.27.0, or a pub...
CVE-2023-41626
Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface...
CVE-2023-41626
Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface...
Gradio Code Issue Vulnerability
Gradio is an open source Python library that is a way to demonstrate machine learning models through a friendly web interface. A security vulnerability exists in Gradio version v3.27.0, which stems from an arbitrary file upload vulnerability in the /upload interface...
PT-2023-28006
Name of the Vulnerable Software and Affected Versions Gradio version 3.27.0 Description The issue is related to an arbitrary file upload vulnerability. This vulnerability can be exploited via the "/upload" interface. Recommendations For Gradio version 3.27.0, consider disabling the /upload...
CVE-2023-41626
Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface...
CVE-2023-42362
An arbitrary file upload vulnerability in Teller Web App v.4.4.0 allows a remote attacker to execute arbitrary commands and obtain sensitive information via uploading a crafted file...