My-CVEs

🔴 My-CVEs Vulnerability research, CVE advisories, and Proof...

CVE-2024-40125

An arbitrary file upload vulnerability in the Media Manager function of Closed-Loop Technology CLESS Server v4.5.2 allows attackers to execute arbitrary code via uploading a crafted PHP file to the upload endpoint...

PT-2024-28789

Name of the Vulnerable Software and Affected Versions Closed-Loop Technology CLESS Server version 4.5.2 Description An arbitrary file upload vulnerability in the Media Manager function allows attackers to execute arbitrary code via uploading a crafted PHP file to the upload endpoint...

CVE-2024-40125: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the Media Manager function of Closed-Loop Technology CLESS Server v4.5.2 allows attackers to execute arbitrary code via uploading a crafted PHP file to the upload endpoint...