EcoStruxure Power Build Unrestricted File Download Code Execution

The vulnerability of the online configuration software of EcoStruxure Power Build lies in the ability to download unlimited files of a malicious nature. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Magento Commerce Code Execution

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2020-25733

webTareas through 2.1 allows upload of the dangerous .exe and .shtml file types...

Design/Logic Flaw

webTareas through 2.1 allows upload of the dangerous .exe and .shtml file types...

UBUNTU-CVE-2020-14209

Dolibarr before 11.0.5 allows low-privilege users to upload files of dangerous types, leading to arbitrary code execution. This occurs because .pht and .phar files can be uploaded. Also, a .htaccess file can be uploaded to reconfigure access control e.g., to let .noexe files be executed as PHP co...

Exploit for Unrestricted Upload of File with Dangerous Type in Webdesi9 File_Manager

CVE-2020-25213 wp-file-manager 6.7 20th Aug 2020 Wordpress...

Siemens SPPA-T3000 Code Execution

The vulnerability of the Siemens SPPA-T3000 application server is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SharePoint Server Unrestricted File Execution

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading a specially created package...

SharePoint Server Unrestricted File Execution

The vulnerability of Microsoft Business Productivity Servers, SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading a specially...

Web containers Netweaver Application Server Java unlimited file upload

The vulnerability of Web containers in Netweaver Application Server Java applications is related to the unlimited loading of malicious files. Exploiting this vulnerability allows a malicious actor to remotely upload malicious files...

Microsoft SharePoint Unrestricted File Download

The vulnerability of the Microsoft SharePoint Enterprise Server software and the Microsoft SharePoint Foundation email messaging software is related to the unlimited download of sensitive files. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

Google Chrome File Download Protection Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions of Google Chrome prior to 78.0.3904.70. A remote attacker can exploit this vulnerability to bypass file download protection and download dangerous files to a user's system...

Tula Code Execution

The vulnerability of the automated personal data management system “Tula” is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading a specially crafted file onto the server using a specially crafted POST...

BAR.- Unrestricted File Execution

The vulnerability in the platform for creating a unified database and electronic registration of residential properties, “BAR.- ”, is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by uploading a php file to th...

Symfony Setter Unrestricted File Loading Code Execution

The vulnerability of the Symfony framework’s setter method is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code or disclose protected information...

SAP BusinessObjects Business Intelligence Unrestricted File Download

The vulnerability of SAP BusinessObjects Business Intelligence platform is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Security Bulletin: IBM Security Identity Manager is affected by multiple vulnerabilities (CVE-2018-1956, CVE-2018-1969, CVE-2018-1967, CVE-2018-2019)

Summary IBM Security Identity Manager ISIM has addressed the following vulnerabilities that can allow attackers to compromise user accounts via weak passwords, uploading or transferring dangerous files types, cross-site scripting, or information disclosure and denial of service attacks...

CVE-2018-1969

IBM Security Identity Manager 6.0.0 allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 153750...

Design/Logic Flaw

HiScout GRC Suite before 3.1.5 allows Unrestricted Upload of Files with Dangerous Types...

[SECURITY] Fedora 28 Update: nikto-2.1.6-1.fc28

Nikto is a web server scanner which performs comprehensive tests against web servers for multiple items, including over 3300 potentially dangerous files/CGIs, versions on over 625 servers, and version specific problems on over 230 servers. Scan items and plugins are frequently updated and can be...