CVE-2023-42180

An arbitrary file upload vulnerability in the /user/upload component of lenosp 1.0-1.2.0 allows attackers to execute html code via a crafted JPG file...

CVE-2023-42180

An arbitrary file upload vulnerability in the /user/upload component of lenosp 1.0-1.2.0 allows attackers to execute html code via a crafted JPG file...

Privilege escalation

An arbitrary file upload vulnerability in the /user/upload component of lenosp 1.0-1.2.0 allows attackers to execute html code via a crafted JPG file...

Lenosp Code Issues Vulnerabilities

Lenosp is a Spring Boot 2.0 rapid development modular scaffolding organized by Zhengzhou Programmers zzdevelop in China. A security vulnerability exists in Lenosp versions 1.0.0 to 1.2.0. The vulnerability stems from an arbitrary file upload vulnerability in the /user/upload component, which allo...

CVE-2023-42180

An arbitrary file upload vulnerability in the /user/upload component of lenosp 1.0-1.2.0 allows attackers to execute html code via a crafted JPG file...

CVE-2023-42362

An arbitrary file upload vulnerability in Teller Web App v.4.4.0 allows a remote attacker to execute arbitrary commands and obtain sensitive information via uploading a crafted file...

CVE-2023-42362

CVE-2023-42362 describes an arbitrary file upload vulnerability in Teller Web App v4.4.0 that can allow a remote attacker to execute arbitrary commands and access sensitive information via a crafted upload. Public sources in connected documents confirm the affected product/version and the potenti...

CVE-2023-42180

An arbitrary file upload vulnerability in the /user/upload component of lenosp 1.0-1.2.0 allows attackers to execute html code via a crafted JPG file...

CVE-2023-42362

An arbitrary file upload vulnerability in Teller Web App v.4.4.0 allows a remote attacker to execute arbitrary commands and obtain sensitive information via uploading a crafted file...

Arbitrary File Upload

Cockpit CMS is vulnerable to Arbitrary File Upload. The vulnerability is caused by missing validation/sanitization of the request data contained in the POST request body sent to the /assets/upload endpoint while uploading .shtml files. This can lead to arbitrary code execution...

PT-2023-28323 · Unknown · Teller Web App

Name of the Vulnerable Software and Affected Versions: Teller Web App version 4.4.0 Description: An arbitrary file upload vulnerability allows a remote attacker to execute arbitrary commands and obtain sensitive information via uploading a crafted file. Recommendations: For Teller Web App version...

CVE-2023-40731

A vulnerability has been identified in QMS Automotive All versions V12.39. The affected application allows users to upload arbitrary file types. This could allow an attacker to upload malicious files, that could potentially lead to code tampering...

CVE-2023-40731

Siemens QMS Automotive (all versions before v12.39) is affected by CVE-2023-40731 due to an unrestricted upload of file types in the application, enabling upload of malicious files that could lead to code tampering. Reported exposure is network-based with low attack complexity and requires vulner...

The vulnerability of the data exchange software between SCADA systems, Triangle MicroWorks SCADA Data Gateway (SDG), allows a intruder to upload arbitrary files.

The vulnerability of the data exchange software between SCADA systems is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to upload arbitrary files by sending a specially crafted HTTP request...

GHSA-38VF-35CG-M73W Cockpit CMS arbitrary file upload vulnerability

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...

Cockpit CMS arbitrary file upload vulnerability

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...

CVE-2023-41564

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...

WordPress My Account Page Editor for Woocommerce Plugin < 1.3.2 is vulnerable to Arbitrary File Upload

Software My Account Page Editor for Woocommerce Type Plugin Vulnerable versions 1.3.2 Fixed in 1.3.2 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2023-4536 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 67cdcd9b4665 Credits Alexander Concha...

Cockpit Code Issues Vulnerabilities

Cockpit is an interactive server management interface. A security vulnerability exists in Cockpit CMS version v2.6.3, which originates from an arbitrary file upload vulnerability in the Upload Asset feature. The vulnerability can be exploited to execute arbitrary code by uploading a .shtml file...

CVE-2023-41564

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file...