EUVD-2021-16273

Malware in sbrugna...

EUVD-2024-40098

Malicious code in bioql PyPI...

EUVD-2025-0070

Malicious code in bioql PyPI...

EUVD-2023-12621

Malicious code in bioql PyPI...

EUVD-2022-49555

Malicious code in bioql PyPI...

EUVD-2025-16997

Malicious code in bioql PyPI...

EUVD-2024-29404

Malicious code in bioql PyPI...

EUVD-2025-26118

Malicious code in bioql PyPI...

EUVD-2025-13374

Malicious code in bioql PyPI...

Remote Code Execution (RCE)

unopim/unopim is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper input validation because the image upload on user creation performs only client-side file type checks, allowing an attacker to modify a captured upload change extension and content to .php and execute...

CVE-2025-56694

Client-side password validation CWE-602 in lumasoft fotoShare Cloud 2025-03-13 allowing unauthenticated attackers to view password-protected photo albums...

CVE-2025-31979

A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix SM, where the application fails to properly enforce file type restrictions during the upload process. An attacker may exploit this flaw to upload malicious or unauthorized files, such as scripts, executables, or w...

CVE-2025-31979

CVE-2025-31979 concerns HCL BigFix Service Management (SM). The vulnerability is a file upload validation bypass where the application fails to properly enforce file type restrictions during upload, allowing an attacker to upload unauthorized or malicious files (e.g., scripts, executables, web sh...

CVE-2025-56694

Client-side password validation CWE-602 in lumasoft fotoShare Cloud 2025-03-13 allowing unauthenticated attackers to view password-protected photo albums...

CVE-2025-56694

Client-side password validation CWE-602 in lumasoft fotoShare Cloud 2025-03-13 allowing unauthenticated attackers to view password-protected photo albums...

CVE-2025-55743

UnoPim is an open-source Product Information Management PIM system built on the Laravel framework. Before 0.2.1, the image upload at the user creation feature performs only client side file type validation. A user can capture the request by uploading an image, capture the request through a Proxy...

CVE-2025-55743

UnoPim is an open-source Product Information Management PIM system built on the Laravel framework. Before 0.2.1, the image upload at the user creation feature performs only client side file type validation. A user can capture the request by uploading an image, capture the request through a Proxy...

CVE-2025-55743 UnoPim vulnerable to remote code execution through Arbitrary File upload

UnoPim is an open-source Product Information Management PIM system built on the Laravel framework. Before 0.2.1, the image upload at the user creation feature performs only client side file type validation. A user can capture the request by uploading an image, capture the request through a Proxy...

CVE-2025-55743 UnoPim vulnerable to remote code execution through Arbitrary File upload

UnoPim is an open-source Product Information Management PIM system built on the Laravel framework. Before 0.2.1, the image upload at the user creation feature performs only client side file type validation. A user can capture the request by uploading an image, capture the request through a Proxy...

CVE-2025-55743

UnoPim (Laravel-based PIM) is vulnerable to Remote Code Execution via Arbitrary File Upload, due to insufficient client-side validation of image uploads in the user-creation flow. Attackers can craft and replace an uploaded image (e.g., poc.php) to execute code when accessed. The issue is fixed i...