CVE-2022-32060

Snipe-IT Версия v6.0.2 Описание уязвимости: Уязвимость произвольной загрузки файлов в компоненте Update Branding Settings Snipe-IT v6.0.2 позволяет злоумышленникам выполнять произвольный код через специально созданный файл. Векторы атаки: Мы обнаружили уязвимость загрузки файлов при загрузке...

CVE-2020-8825

CVE-2020-8825 Publication : CVE-2020-8825 Vendeur : PHP VanillaForum Description : La vulnérabilité existe en raison d'une insuffisance de désinfection des données fournies par l'utilisateur transmises à l'URL "index.php?p=/dashboard/settings/branding". Un attaquant distant peut injecter et...

EUVD-2022-37530

Malicious code in bioql PyPI...

EUVD-2022-6429

Malicious code in bioql PyPI...

CVE-2022-34578

Open Source Point of Sale v3.3.7 was discovered to contain an arbitrary file upload vulnerability via the Update Branding Settings page...

CVE-2022-34578

Open Source Point of Sale v3.3.7 was discovered to contain an arbitrary file upload vulnerability via the Update Branding Settings page...

CVE-2022-34578

Open Source Point of Sale v3.3.7 was discovered to contain an arbitrary file upload vulnerability via the Update Branding Settings page...

Design/Logic Flaw

Open Source Point of Sale v3.3.7 was discovered to contain an arbitrary file upload vulnerability via the Update Branding Settings page...

CVE-2022-34578

CVE-2022-34578 affects Open Source Point of Sale (OSPOS) v3.3.7. Reported as an arbitrary file upload vulnerability via the Update Branding Settings page; root cause not detailed in the provided sources beyond the upload flaw. No explicit exploit in the supplied documents; no patch version or wor...

CVE-2022-34578

Open Source Point of Sale v3.3.7 was discovered to contain an arbitrary file upload vulnerability via the Update Branding Settings page...

CVE-2022-34578

Open Source Point of Sale v3.3.7 was discovered to contain an arbitrary file upload vulnerability via the Update Branding Settings page...

Open Source Point of Sale 代码问题漏洞

Open Source Point of Sale is a web-based point of sale system. A security vulnerability exists in Open Source Point of Sale version v3.3.7, which stems from an arbitrary file upload vulnerability discovered via the Update Branding Settings page...

CVE-2022-34578: Unrestricted Upload of File with Dangerous Type

Open Source Point of Sale v3.3.7 was discovered to contain an arbitrary file upload vulnerability via the Update Branding Settings page...

PT-2022-22217 · Unknown · Open Source Point Of Sale

Name of the Vulnerable Software and Affected Versions: Open Source Point of Sale version 3.3.7 Description: The issue is related to an arbitrary file upload vulnerability. This vulnerability can be exploited via the Update Branding Settings page. Recommendations: For Open Source Point of Sale...

Snipe-IT 6.0.2 vulnerable to Cross-site Scripting via arbitrary file upload in Update Branding Settings

An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file...

CVE-2022-32060

An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file...

CVE-2022-32060

An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file...

Design/Logic Flaw

An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file...

PT-2022-21083 · Snipe-It · Snipe-It

Name of the Vulnerable Software and Affected Versions: Snipe-IT version 6.0.2 Description: The issue allows attackers to execute arbitrary code via a crafted file, exploiting an arbitrary file upload vulnerability in the Update Branding Settings component. Recommendations: For Snipe-IT version...

CVE-2022-32060: Improper Neutralization of Input During Web Page Generation

An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file...