EUVD-2007-1598

Malware in sbrugna...

EUVD-2009-4782

Malware in sbrugna...

EUVD-2017-16426

Malware in sbrugna...

EUVD-2007-1232

Malware in sbrugna...

EUVD-2006-7091

Malware in sbrugna...

EUVD-2021-24799

Malware in sbrugna...

EUVD-2007-2734

Malware in sbrugna...

EUVD-2006-3333

Malware in sbrugna...

EUVD-2014-9336

Malware in sbrugna...

EUVD-2009-4781

Malware in sbrugna...

EUVD-2007-6445

Malware in sbrugna...

EUVD-2024-50755

Malicious code in bioql PyPI...

EUVD-2022-2536

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2016-9187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unrestricted file upload vulnerability in the double extension support in the image module in Moodle 3.1.2 allows remote authenticated users to execute arbitrar...

CVE-2024-13342 Booster for WooCommerce <= 7.2.4 - Unauthenticated Double Extension Arbitrary File Upload

The Booster for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'addfilestoorder' function in all versions up to, and including, 7.2.4. This makes it possible for unauthenticated attackers to upload arbitrary files with double...

Linux Distros Unpatched Vulnerability : CVE-2021-44123

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP 4.0.0 is affected by a remote command execution vulnerability. To exploit the vulnerability, an attacker must craft a malicious picture with a double...

CVE-2015-10144

The Responsive Thumbnail Slider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type sanitization in the via the image uploader in versions up to 1.0.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary...

CVE-2024-12300

The AR for WordPress plugin for WordPress is vulnerable to unauthorized double extension file upload due to a missing capability check on the setarfeaturedimage function in all versions up to, and including, 7.3. This makes it possible for unauthenticated attackers to upload php files leveraging ...

CVE-2021-24171

The WooCommerce Upload Files WordPress plugin before 59.4 ran a single sanitization pass to remove blocked extensions such as .php. It was possible to bypass this and upload a file with a PHP extension by embedding a "blocked" extension within another "blocked" extension in the "wcuffilename"...

CVE-2021-34639

Authenticated File Upload in WordPress Download Manager = 3.1.24 allows authenticated Author+ users to upload files with a double extension, e.g. "payload.php.png" which is executable in some configurations. This issue affects: WordPress Download Manager version 3.1.24 and prior versions...