CVE-2025-10544

CVE-2025-10544 concerns AvePoint products (DocAve <= 6.13.2, Perimeter <= 1.12.3, Compliance Guardian

CVE-2025-40678 Unrestricted upload vulnerability for dangerous file types on Summar Software´s Portal del Empleado

Unrestricted upload vulnerability for dangerous file types on Summar Software´s Portal del Empleado. This vulnerability allows an attacker to upload a dangerous file type by sending a POST request using the parameter “cctl00$ContentPlaceHolder1$fuAdjunto” in “/MemberPages/ntfabsentismo.aspx”...

PT-2025-38314

Name of the Vulnerable Software and Affected Versions Summar Software Portal del Empleado affected versions not specified Description A file upload issue exists in Summar Software’s Portal del Empleado, allowing the upload of dangerous file types. An attacker can exploit this by sending a POST...

Linux Distros Unpatched Vulnerability : CVE-2020-14209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dolibarr before 11.0.5 allows low-privilege users to upload files of dangerous types, leading to arbitrary code execution. This occurs because .pht and .phar...

CVE-2025-31100

Unrestricted Upload of File with Dangerous Type vulnerability in Mojoomla School Management allows Upload a Web Shell to a Web Server.This issue affects School Management: from n/a through 1.93.1 02-07-2025...

CVE-2025-54944

CVE-2025-54944 affects SUNNET Corporate Training Management System prior to version 10.11. An unrestricted upload of files with dangerous types allows remote attackers to write malicious code to a specific file, potentially leading to arbitrary code execution. Root cause: insufficient validation ...

CVE-2025-36174

IBM Integrated Analytics System 1.0.0.0 through 1.0.30.0 could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened...

CVE-2025-36174

IBM Integrated Analytics System 1.0.0.0 through 1.0.30.0 could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened...

CVE-2025-36174 IBM Integrated Analytics System file upload

IBM Integrated Analytics System 1.0.0.0 through 1.0.30.0 could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened...

CVE-2025-54677

Unrestricted Upload of File with Dangerous Type vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita allows Using Malicious Files. This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through 4.5.3...

PT-2025-33976 · Automattic +1 · Woocommerce +1

Name of the Vulnerable Software and Affected Versions: ELEXtensions ReachShip WooCommerce Multi-Carrier & Conditional Shipping versions through 4.3.1 Description: An unrestricted file upload vulnerability exists that allows the use of malicious files. This issue impacts e-commerce platforms...

WordPress plugin Form Block 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

CVE-2025-44139

Emlog Pro V2.5.7 is vulnerable to Unrestricted Upload of File with Dangerous Type via /emlog/admin/plugin.php?action=uploadzip...

SMG Software Information Portal 代码问题漏洞

SMG Software Information Portal is an information portal product from SMG Software, Turkey. A code issue vulnerability exists in SMG Software Information Portal, which arises from the unrestricted upload of dangerous types of files and improper neutralization of special elements, which could lead...

CVE-2025-54444

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0...

PT-2025-45279

Name of the Vulnerable Software and Affected Versions Plugify Support Ticket System for WooCommerce Premium versions prior to 2.1.1 Description The Helpdesk Support Ticket System for WooCommerce plugin for WordPress allows unauthenticated attackers to upload arbitrary files to the server. This is...

PT-2025-27167 · WordPress · File Manager Plugin For Wordpress

Name of the Vulnerable Software and Affected Versions: File Manager Plugin For Wordpress versions prior to 7.5 Description: The issue allows attackers to upload dangerous files, including web shells, to a web server, compromising its security. This is due to an Unrestricted Upload of File with...

Elecom WRC-2533GST2和Elecom WRC-1167GST2 代码问题漏洞

The Elecom WRC-2533GST2 and Elecom WRC-1167GST2 are both routers from Elecom Japan. A code issue vulnerability exists in the Elecom WRC-2533GST2 and Elecom WRC-1167GST2, which stems from insufficient upload limitations for dangerous types of files, and could lead to arbitrary code execution...

CVE-2023-33493

An Unrestricted Upload of File with Dangerous Type vulnerability in the Ajaxmanager File and Database explorer ajaxmanager module for PrestaShop through 2.3.0, allows remote attackers to upload dangerous files without restrictions...

Insecure File Upload

typo3/cms-core is vulnerable to Insecure File Upload. The vulnerability is due to the file management module, allows an attacker to upload potentially dangerous or misleading files. Such as executable binaries or files with mismatched extensions and MIME types...