Versa Director File Loading Privilege Escalation

The vulnerability of the file loading function in the “Change Favicon of the software platform for managing network infrastructure Versa Director” interface relates to the unlimited loading of dangerous types of files. Exploiting this vulnerability could allow a malicious actor to enhance their...

Magento Open Source Code Execution

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Veeam Service Provider Console File Loading Code Execution

The vulnerability of the file loading function of the backup and data recovery software for remote and cloud-based Veeam Service Provider Console VSPC involves unlimited loading of dangerous files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code on the VSPC...

Traccar GPS API Code Execution

The vulnerability of the Traccar GPS system’s application programming interface is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by creating or loading arbitrary files...

GO-2023-2073 Croc sender may send dangerous new files to receiver in github.com/schollz/croc

Croc sender may send dangerous new files to receiver in github.com/schollz/croc...

PT-2024-6831 · Sap · Sap Businessobjects Business Intelligence Platform

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform affected versions not specified Description: The issue is related to unrestricted file upload of dangerous file types. An authenticated attacker can upload malicious code over the network,...

OpenVPN Plug-in Handler Module Loading

The vulnerability of the Plug-in Handler component in the OpenVPN software involves unlimited downloading of dangerous files. Exploiting this vulnerability allows a remote attacker to download arbitrary modules...

IBM Security Guardium DoS

The vulnerability of the IBM Security Guardium security tool relates to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

PT-2024-27538 · Unknown · Zita Elementor Site Library

Name of the Vulnerable Software and Affected Versions: Zita Elementor Site Library versions 1.6.1 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, potentially enabling the upload of a web shell to a web server. This could be exploited by uploadi...

PT-2024-27541 · Automattic · Newspack Blocks

Name of the Vulnerable Software and Affected Versions: Automattic Newspack Blocks versions 3.0.8 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, enabling an attacker to upload a web shell to a web server. Recommendations: For versions 3.0.8 and...

PT-2024-26967 · Verint · Verint

Name of the Vulnerable Software and Affected Versions: Verint affected versions not specified Description: The issue concerns an unrestricted upload of a file with a dangerous type, classified as CWE-434. This could potentially allow an attacker to upload malicious files, leading to various...

FileStoreConfig Application Code Execution

The vulnerability of the FileStoreConfig application in the Avalanche mobile device management system involves unlimited loading of dangerous types of files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading a specially created file...

CVE-2024-33556

Unrestricted Upload of File with Dangerous Type vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8...

CVE-2023-25444

CVE-2023-25444 affects the WordPress plugin JS Help Desk – Best Help Desk & Support Plugin (versions

WordPress plugin canvasio3D Light 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

PT-2024-4591 · Sap · Sap Document Builder

Name of the Vulnerable Software and Affected Versions: SAP Document Builder affected versions not specified Description: The issue is related to an unlimited upload of dangerous file types in the SAP Document Builder. An authenticated attacker can upload a malicious file to the SAP Document Build...

WordPress Unlimited File Download Command Execution

The vulnerability of the WordPress website content management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2024-24472 · Unknown · Phpgurukul Tourism Management System

Name of the Vulnerable Software and Affected Versions: Phpgurukul Tourism Management System version 2.0 Description: The issue concerns an unrestricted upload of files with dangerous types via the tms/admin/create-package.php endpoint. When creating a new package, there are no checks for the type...

CVE-2024-3778 Ai3 QbiBot - Unrestricted File Upload

The file upload functionality of Ai3 QbiBot does not properly restrict types of uploaded files, allowing remote attackers with administrator privilege to upload files with dangerous type containing malicious code...

CVE-2024-3778

CVE-2024-3778 affects Ai3 QbiBot due to an unrestricted file upload weakness. The issue allows remote attackers with administrator privileges to upload files of dangerous types containing malicious code through the file upload functionality. Affected release range is before 8.0.4; upgrading to 8....