EUVD-2025-7136

Malicious code in bioql PyPI...

CVE-2025-29411

An arbitrary file upload vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...

CVE-2025-29412

A cross-site scripting XSS vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter...

PT-2025-12351

Name of the Vulnerable Software and Affected Versions Mart Developers iBanking version 2.0.0 Description The issue concerns an arbitrary file upload vulnerability in the Client Profile Update section, allowing attackers to execute arbitrary code by uploading a crafted PHP file. This enables the...

CVE-2025-29412: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter...

iBanking 安全漏洞

iBanking is an information system by Martin Mbithi Personal Developer. A security vulnerability exists in iBanking version v2.0.0, which stems from an arbitrary file upload vulnerability in the Client Profile Update section that could lead to the execution of arbitrary code...

CVE-2025-29411: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...

CVE-2025-29411

An arbitrary file upload vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...

PT-2025-12350

Name of the Vulnerable Software and Affected Versions Mart Developers iBanking version 2.0.0 Description A cross-site scripting XSS issue in the Client Profile Update section allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the Name parameter...