182 matches found
CVE-2023-33404
CVE-2023-33404 A user who has EditOwnPosts right on BlogEngine.NET CMS version 3.3.8.0 and earlier has the ability to upload a malicious file to a hard-coded location. POST request to /api/upload endpoint with "action=video" parameters, as shown in the screenshot below, triggers a file upload...
CVE-2023-33405
CVE-2023-33405 Open Redirection vulnerability identified on BlogEngine.NET CMS version 3.3.8.0 and earlier If a GET request to default.aspx page contains "years=" within the URL, the application calls a function named "Redirect". This function sets several parameters including year, month, date,...
CVE-2018-14485
BlogEngine.NET 3.3 allows XXE attacks via the POST body to metaweblog.axd...
EUVD-2019-3070
Malware in sbrugna...
EUVD-2019-2514
Malware in sbrugna...
EUVD-2019-2515
Malware in sbrugna...
EUVD-2019-2513
Malware in sbrugna...
EUVD-2019-2512
Malware in sbrugna...
EUVD-2013-6754
Malware in sbrugna...
EUVD-2008-6446
Malware in sbrugna...
EUVD-2022-30252
Malicious code in bioql PyPI...
EUVD-2023-26966
Malicious code in bioql PyPI...
EUVD-2022-44611
Malicious code in bioql PyPI...
EUVD-2022-33356
Malicious code in bioql PyPI...
EUVD-2023-26967
Malicious code in bioql PyPI...
EUVD-2023-26968
Malicious code in bioql PyPI...
EUVD-2022-44610
Malicious code in bioql PyPI...
CVE-2023-33405
Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect...
CVE-2023-33404
An Unrestricted Upload vulnerability, due to insufficient validation on UploadControlled.cs file, in BlogEngine.Net version 3.3.8.0 and earlier allows remote attackers to execute remote code...