Lucene search
+L

1412 matches found

Positive Technologies
Positive Technologies
added 2024/10/20 12:0 a.m.6 views

PT-2024-33565 · Photokit · Photokit

Name of the Vulnerable Software and Affected Versions: photokit versions n/a through 1.0 Description: The issue allows for the unrestricted upload of files with dangerous types, enabling a user to upload a web shell to a web server. This can be exploited to gain unauthorized access to the server...

10CVSS7.2AI score0.00501EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2024/10/20 12:0 a.m.8 views

WordPress plugin Nice Backgrounds 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

10CVSS7.1AI score0.0053EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/20 12:0 a.m.9 views

WordPress plugin Woostagram Connect 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

10CVSS7.2AI score0.00501EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/10/17 12:0 a.m.11 views

PT-2024-33432 · Unknown · Cooked Pro

Name of the Vulnerable Software and Affected Versions: Cooked Pro versions prior to 1.8.0 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the Cooked Pro software. This allows for the upload of files with potentially dangerous types without...

10CVSS7.2AI score0.00496EPSS
SaveExploits0References5
NVD
NVD
added 2024/10/16 1:15 p.m.15 views

CVE-2024-49257

Unrestricted Upload of File with Dangerous Type vulnerability in Denis Azz Anonim Posting azz-anonim-posting allows Upload a Web Shell to a Web Server.This issue affects Azz Anonim Posting: from n/a through = 0.9...

10CVSS0.00496EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/16 12:0 a.m.4 views

WordPress plugin Azz Anonim Posting 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

10CVSS7.3AI score0.00496EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/10/16 12:0 a.m.9 views

PT-2024-33352 · Unknown · Feed Comments Number

Name of the Vulnerable Software and Affected Versions: Feed Comments Number versions 0.2.1 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server. This can be exploited by uploading malicious files,...

10CVSS7AI score0.00496EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/10/16 12:0 a.m.10 views

WordPress plugin Digital Lottery 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

10CVSS7.2AI score0.00496EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/10/16 12:0 a.m.6 views

PT-2024-32952 · Unknown · Pdf Flipbook +1

Name of the Vulnerable Software and Affected Versions: Creates 3D Flipbook, PDF Flipbook versions 1.2 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server. This can be exploited by uploading a...

9.9CVSS6.7AI score0.00482EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/10/16 12:0 a.m.9 views

PT-2024-33380

Name of the Vulnerable Software and Affected Versions Shafiq Digital Lottery versions 3.0.5 and earlier Description The issue allows for the unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server. This can be exploited to gain unauthorized access to...

10CVSS5.2AI score0.00496EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/10/16 12:0 a.m.7 views

WordPress plugin ACF Images Search And Insert 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

9.9CVSS7.2AI score0.00482EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/16 12:0 a.m.9 views

WordPress plugin Creates 3D Flipbook, PDF Flipbook 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Creates 3D Flipbook, PDF...

9.9CVSS7AI score0.00482EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/16 12:0 a.m.7 views

WordPress plugin Iconize 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

9.1CVSS7.2AI score0.00479EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/10/16 12:0 a.m.14 views

The vulnerability of the SAP Business Objects Business Intelligence Platform lies in its ability to download files of a dangerous type without limitation, allowing an attacker to execute arbitrary code.

The vulnerability of the SAP Business Objects Business Intelligence Platform relates to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

4.3CVSS5.9AI score0.00357EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/16 12:0 a.m.14 views

The vulnerability of the SAP Business Objects Business Intelligence Platform lies in its ability to download files of a dangerous type without limit, allowing attackers to compromise the integrity of the protected information.

The vulnerability of the SAP Business Objects Business Intelligence Platform relates to the unlimited loading of dangerous files. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...

3.1CVSS5.4AI score0.00373EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2024/10/09 3:15 p.m.6 views

CVE-2024-45137

InDesign Desktop versions 19.4, 18.5.3 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by uploading a malicious file which, when executed, could run arbitrary...

7.8CVSS6.1AI score0.00269EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/09 12:0 a.m.5 views

Adobe InDesign 代码问题漏洞

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from a code issue vulnerability that originates from the unrestricted upload of a dangerous type of file. An attacker could exploit the vulnerability to execute arbitrary cod...

7.8CVSS7.6AI score0.00269EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/09 12:0 a.m.6 views

Adobe InCopy 代码问题漏洞

Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. Adobe InCopy suffers from a code issue vulnerability that originates from the unrestricted upload of dangerous types of files. An attacker could exploit the vulnerability to execute arbitrary cod...

7.8CVSS7.6AI score0.00269EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/10/05 12:0 a.m.5 views

PT-2024-32531 · Unknown · Bit Form – Contact Form Plugin

Name of the Vulnerable Software and Affected Versions: Bit Form – Contact Form Plugin versions n/a through 2.13.10 Description: The issue allows for the unrestricted upload of files with dangerous types, which can lead to code injection. This can potentially be exploited by attackers to inject...

8CVSS7.9AI score0.00438EPSS
SaveExploits0References6
GithubExploit
GithubExploit
added 2024/09/27 3:10 a.m.118 views

Exploit for Unrestricted Upload of File with Dangerous Type in Git

CVE-2024-32002-POC This is a demo...

9CVSS8.2AI score0.25334EPSS
SaveExploits32
Rows per page
Query Builder