Lucene search
+L

1412 matches found

CNNVD
CNNVD
added 2024/07/09 12:0 a.m.7 views

WordPress plugin Church Admin code issue vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

9.9CVSS7.3AI score0.00537EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/07/09 12:0 a.m.6 views

WordPress plugin Zita Elementor Site Library Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

9.9CVSS7.3AI score0.00492EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/07/09 12:0 a.m.8 views

PT-2024-27535

Name of the Vulnerable Software and Affected Versions Andy Moyle Church Admin versions n/a through 4.4.6 Description The issue allows an attacker to upload a web shell to a web server due to an unrestricted upload of file with dangerous type vulnerability. This enables potential remote code...

9.9CVSS6.2AI score0.00537EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/07/09 12:0 a.m.7 views

WordPress plugin Newspack Blocks security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.9CVSS7.1AI score0.00492EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2024/07/03 8:1 a.m.57 views

Exploit for Unrestricted Upload of File with Dangerous Type in Git

CVE-2024-32002 PoC 1. You must set up the git's symbolic link...

9CVSS7.3AI score0.25334EPSS
SaveExploits32
GithubExploit
GithubExploit
added 2024/07/03 8:1 a.m.84 views

Exploit for Unrestricted Upload of File with Dangerous Type in Git

CVE-2024-32002 PoC 1. You must set up the git's symbolic link...

9CVSS8.1AI score0.25334EPSS
SaveExploits32
BDU FSTEC
BDU FSTEC
added 2024/07/01 12:0 a.m.8 views

The vulnerability of the Collection Preview component of the edu-sharing e-learning platform management system allows a perpetrator to execute arbitrary code or trigger a service failure.

The vulnerability of the Collection Preview component in the edu-sharing e-learning platform management system involves unlimited downloading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code using a specially created HTML file, or to...

6.5CVSS5.9AI score0.00831EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2024/06/21 4:15 p.m.4 views

CVE-2024-35767

Unrestricted Upload of File with Dangerous Type vulnerability in Bogdan Bendziukov Squeeze allows Code Injection.This issue affects Squeeze: from n/a through 1.4...

7.2CVSS5.8AI score0.00489EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
added 2024/06/21 12:0 a.m.3 views

VulnCheck KEV: CVE-2024-37228

Unrestricted Upload of File with Dangerous Type vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through = 0.1.0.38...

10CVSS5.8AI score0.00531EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2024/06/20 7:37 a.m.64 views

Exploit for Unrestricted Upload of File with Dangerous Type in Git

CVE-2024-32002 exploit for CVE-2024-32002 Warning This rep...

9CVSS8.1AI score0.25334EPSS
SaveExploits32
BDU FSTEC
BDU FSTEC
added 2024/06/19 12:0 a.m.8 views

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce Webhooks lies in their inability to prevent unlimited uploading of dangerous files, allowing attackers to execute arbitrary code.

The vulnerability of programming platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce Webhooks is related to the unlimited uploading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

9.1CVSS6AI score0.01386EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/06/14 12:0 a.m.6 views

The vulnerability of the application programming interface of the Spring Cloud Skipper package management server allows a perpetrator to write any files they desire.

The vulnerability of the Spring Cloud Skipper package manager’s application interface involves unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to write any files they desire...

6.8CVSS5.5AI score0.17537EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2024/06/13 1:15 p.m.5 views

CVE-2024-36396

Verint - CWE-434: Unrestricted Upload of File with Dangerous Type...

8.8CVSS5.8AI score0.00438EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/13 12:33 p.m.24 views

CVE-2024-36396 Verint - CWE-434: Unrestricted Upload of File with Dangerous Type

Verint - CWE-434: Unrestricted Upload of File with Dangerous Type...

8.8CVSS0.00438EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/06/13 12:0 a.m.6 views

Verint Workforce Optimization Code Issue Vulnerability

Verint Systems Verint Workforce Optimization WFO is an employee performance management solution from Verint Systems, USA. The product supports workforce management, call recording, automated quality management, performance management, text and desktop analytics, and more. A code issue vulnerabili...

8.8CVSS7.1AI score0.00438EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2024/06/12 9:46 a.m.330 views

Exploit for Unrestricted Upload of File with Dangerous Type in Likeshop

Badges !MIT Licensehttps://img.shields.io/badge/Licens...

9.8CVSS7.6AI score0.70688EPSS
SaveExploits1
CNNVD
CNNVD
added 2024/06/10 12:0 a.m.9 views

WordPress plugin BuddyPress Cover Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A code issue...

10CVSS7.3AI score0.00511EPSS
SaveExploits0References2
OSV
OSV
added 2024/06/04 7:15 a.m.7 views

CVE-2023-33930

Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates allows Code Injection.This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a through 1.5.66...

7.2CVSS5.8AI score0.00519EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/06/03 12:0 a.m.19 views

The vulnerability of the CMS system Netcat, related to the unlimited loading of dangerous types of files, allows attackers to execute arbitrary code.

The vulnerability of the CMS system Netcat is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.7CVSS5.9AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/06/03 12:0 a.m.5 views

The vulnerability of the /ms/file/upload.do file in the MCms content management system allows a hacker to upload any files they desire.

The vulnerability of the /ms/file/upload.do file in the MCms content management system is related to the ability to download files of a dangerous type without restrictions. Exploiting this vulnerability allows a malicious actor to download any files by sending a specially crafted POST request...

9CVSS7.6AI score0.17789EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder