Lucene search
+L

1511 matches found

BDU FSTEC
BDU FSTEC
•added 2024/07/01 12:00 a.m.•14 views

The vulnerability of the Collection Preview component of the edu-sharing e-learning platform management system allows a perpetrator to execute arbitrary code or trigger a service failure.

The vulnerability of the Collection Preview component in the edu-sharing e-learning platform management system involves unlimited downloading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code using a specially created HTML file, or to...

6.5CVSS5.9AI score0.00831EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2024/06/21 4:15 p.m.•11 views

CVE-2024-35767

Unrestricted Upload of File with Dangerous Type vulnerability in Bogdan Bendziukov Squeeze allows Code Injection.This issue affects Squeeze: from n/a through 1.4...

7.2CVSS5.8AI score0.00489EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2024/06/21 12:00 a.m.•5 views

VulnCheck KEV: CVE-2024-37228

Unrestricted Upload of File with Dangerous Type vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through = 0.1.0.38...

10CVSS5.8AI score0.00527EPSS
SaveIn wildExploits0References3
GithubExploit
GithubExploit
•added 2024/06/20 7:37 a.m.•69 views

Exploit for Unrestricted Upload of File with Dangerous Type in Git

CVE-2024-32002 exploit for CVE-2024-32002 Warning This rep...

9CVSS8.1AI score0.29234EPSS
SaveExploits32
BDU FSTEC
BDU FSTEC
•added 2024/06/19 12:00 a.m.•14 views

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce Webhooks lies in their inability to prevent unlimited uploading of dangerous files, allowing attackers to execute arbitrary code.

The vulnerability of programming platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce Webhooks is related to the unlimited uploading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

9.1CVSS6AI score0.01386EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/06/14 12:00 a.m.•16 views

The vulnerability of the application programming interface of the Spring Cloud Skipper package management server allows a perpetrator to write any files they desire.

The vulnerability of the Spring Cloud Skipper package manager’s application interface involves unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to write any files they desire...

6.8CVSS5.5AI score0.17537EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2024/06/13 1:15 p.m.•16 views

CVE-2024-36396

Verint - CWE-434: Unrestricted Upload of File with Dangerous Type...

8.8CVSS5.8AI score0.00438EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/13 12:33 p.m.•33 views

CVE-2024-36396 Verint - CWE-434: Unrestricted Upload of File with Dangerous Type

Verint - CWE-434: Unrestricted Upload of File with Dangerous Type...

8.8CVSS0.00438EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/06/13 12:00 a.m.•11 views

Verint Workforce Optimization Code Issue Vulnerability

Verint Systems Verint Workforce Optimization WFO is an employee performance management solution from Verint Systems, USA. The product supports workforce management, call recording, automated quality management, performance management, text and desktop analytics, and more. A code issue vulnerabili...

8.8CVSS7.1AI score0.00438EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2024/06/12 9:46 a.m.•343 views

Exploit for Unrestricted Upload of File with Dangerous Type in Likeshop

Badges !MIT Licensehttps://img.shields.io/badge/Licens...

9.8CVSS7.6AI score0.72917EPSS
SaveExploits1
CNNVD
CNNVD
•added 2024/06/10 12:00 a.m.•15 views

WordPress plugin BuddyPress Cover Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A code issue...

10CVSS7.3AI score0.00511EPSS
SaveExploits0References2
OSV
OSV
•added 2024/06/04 7:15 a.m.•13 views

CVE-2023-33930

Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates allows Code Injection.This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a through 1.5.66...

7.2CVSS5.8AI score0.00519EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/06/03 12:00 a.m.•15 views

The vulnerability of the /ms/file/upload.do file in the MCms content management system allows a hacker to upload any files they desire.

The vulnerability of the /ms/file/upload.do file in the MCms content management system is related to the ability to download files of a dangerous type without restrictions. Exploiting this vulnerability allows a malicious actor to download any files by sending a specially crafted POST request...

9CVSS7.6AI score0.17789EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/06/03 12:00 a.m.•24 views

The vulnerability of the CMS system Netcat, related to the unlimited loading of dangerous types of files, allows attackers to execute arbitrary code.

The vulnerability of the CMS system Netcat is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.7CVSS5.9AI score
SaveExploits0Affected Software1
Gitee
Gitee
•added 2024/05/30 2:15 p.m.•51 views

Exploit for Unrestricted Upload of File with Dangerous Type in Git

amalmurali47/hook This repository is part of the PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. This repository contains the malicious hook used in the exploit. Overview For detailed instructions and an explanation of how the exploit works,...

9CVSS7.9AI score0.29234EPSS
SaveExploits32
OSV
OSV
•added 2024/05/28 8:16 p.m.•11 views

CVE-2022-45171

An issue was discovered in LIVEBOX Collaboration vDesk through v018. An Unrestricted Upload of a File with a Dangerous Type can occur under the vShare web site section. A remote user, authenticated to the product, can arbitrarily upload potentially dangerous files without restrictions...

8.8CVSS5.6AI score0.00752EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/05/28 7:23 p.m.•41 views

CVE-2022-45171

An issue was discovered in LIVEBOX Collaboration vDesk through v018. An Unrestricted Upload of a File with a Dangerous Type can occur under the vShare web site section. A remote user, authenticated to the product, can arbitrarily upload potentially dangerous files without restrictions...

6.4AI score0.00752EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/05/28 12:00 a.m.•8 views

LIVEBOX Collaboration vDesk 安全漏洞

LIVEBOX Collaboration vDesk is an application from LIVEBOX, Inc. A security vulnerability exists in LIVEBOX Collaboration vDesk version 018 and prior versions, which stems from the presence of an unrestricted upload of a dangerous type of file, which allows an authenticated remote user to upload...

8.8CVSS6.8AI score0.00752EPSS
SaveExploits1References2
GithubExploit
GithubExploit
•added 2024/05/25 10:29 a.m.•52 views

Exploit for Unrestricted Upload of File with Dangerous Type in Git

CVE-2024-32002 Submodule AW A submodule to demonstrate CVE-20...

9CVSS7.4AI score0.29234EPSS
SaveExploits32
BDU FSTEC
BDU FSTEC
•added 2024/05/24 12:00 a.m.•16 views

Vulnerability of the /url/url.php script in D-Link DAR-7000 and DAR-8000 router microprogramming software, allowing a hacker to execute arbitrary code

The vulnerability of the /url/url.php script in D-Link’s router microprogramming software DAR-7000 and DAR-8000 is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

6.5CVSS7AI score0.03001EPSS
SaveExploits0References6
Rows per page
Query Builder