PT-2025-12572

Name of the Vulnerable Software and Affected Versions Digiwin ERP version 5.0.1 Description A critical issue was found in Digiwin ERP, affecting an unknown functionality of the file "/Api/TinyMce/UploadAjaxAPI.ashx". The manipulation of the File argument leads to unrestricted upload. This issue c...

PT-2025-12553

Name of the Vulnerable Software and Affected Versions Softwin WMX3 version 3.1 Description A critical vulnerability has been found in Softwin WMX3, affecting the ImageAdd function of the file /ImageAdd.ashx. The manipulation of the File argument leads to unrestricted upload. The attack may be...

PT-2025-12451 · Unknown · Lzcms-Laozhangbokexitong

Name of the Vulnerable Software and Affected Versions: LzCMS-LaoZhangBoKeXiTong versions up to 1.1.4 Description: A critical issue affects some unknown functionality of the file /admin/upload/upimage.html, specifically the HTTP POST Request Handler component. The manipulation of the File argument...

PT-2025-10984

Name of the Vulnerable Software and Affected Versions: LoveCards LoveCardsV2 versions 2.3.0 through 2.3.2 Description: A critical issue affects the processing of the file /api/upload/image. The manipulation of the file argument leads to unrestricted upload. The attack may be initiated remotely. T...

CVE-2025-1834: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, was found in zj1983 zz up to 2024-8. This affects an unknown part of the file /resolve. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the publ...

CVE-2025-1676

A vulnerability classified as critical was found in hzmanyun Education and Training System 3.1.1. Affected by this vulnerability is the function pdf2swf of the file /pdf2swf. The manipulation of the argument file leads to os command injection. The attack can be launched remotely. The exploit has...

PT-2025-3873

Name of the Vulnerable Software and Affected Versions 1902756969 reggie version 1.0 Description A critical vulnerability affects the upload function in the file src/main/java/com/itheima/reggie/controller/CommonController.java, allowing unrestricted file upload. The attack can be launched remotel...

PT-2025-2068

Name of the Vulnerable Software and Affected Versions SingMR HouseRent version 1.0 Description A critical vulnerability has been found in SingMR HouseRent. This issue affects the singleUpload/upload function of the file src/main/java/com/house/wym/controller/AddHouseController.java. The...

CVE-2024-13141: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in osuuu LightPicture up to 1.2.2. This vulnerability affects unknown code of the file /api/upload of the component SVG File Upload Handler. The manipulation of the argument file leads to cross site scripting. The attack can be initiated remotel...

PT-2024-39538 · Unknown · Kalvingit Kvf-Admin

Name of the Vulnerable Software and Affected Versions: kalvinGit kvf-admin up to f12a94dc1ebb7d1c51ee978a85e4c7ed75c620ff Description: A critical issue has been found in the fileUpload function of the FileUploadKit.java file, allowing for unrestricted upload by manipulating the file argument. Thi...

CVE-2024-8865

A vulnerability was found in composiohq composio up to 0.5.8 and classified as problematic. Affected by this issue is the function path of the file composio\server\api.py. The manipulation of the argument file leads to path traversal. The exploit has been disclosed to the public and may be used...

CVE-2024-8865: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was found in composiohq composio up to 0.5.8 and classified as problematic. Affected by this issue is the function path of the file composio\server\api.py. The manipulation of the argument file leads to path traversal. The exploit has been disclosed to the public and may be used...

PT-2024-39283

Name of the Vulnerable Software and Affected Versions: composiohq composio versions up to 0.5.8 Description: A vulnerability was found in composiohq composio, classified as problematic. The issue affects the function path of the file composioserverapi.py. The manipulation of the file argument lea...

PT-2024-37989 · Prain · Prain

Name of the Vulnerable Software and Affected Versions: Prain versions up to 1.3.0 Description: A critical issue has been found in the HTTP POST Request Handler component, specifically affecting some unknown functionality of the file /?import. The manipulation of the file argument leads to code...

CVE-2024-6950: Improper Control of Generation of Code

A vulnerability, which was classified as critical, has been found in Prain up to 1.3.0. Affected by this issue is some unknown functionality of the file /?import of the component HTTP POST Request Handler. The manipulation of the argument file leads to code injection. The attack may be launched...

PT-2024-35943 · Unknown · Lakernote Easyadmin

Name of the Vulnerable Software and Affected Versions: lakernote EasyAdmin up to 20240324 Description: A problematic vulnerability has been found in lakernote EasyAdmin, affecting an unknown part of the file /sys/file/upload. The manipulation of the file argument leads to cross-site scripting. It...

CVE-2024-5377: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester Vehicle Management System 1.0. It has been classified as critical. This affects an unknown part of the file /newvehicle.php. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit...

CVE-2024-4962: Unrestricted Upload of File with Dangerous Type

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DAR-7000-40 V31R02B1413C. Affected by this issue is some unknown functionality of the file /useratte/resmanage.php. The manipulation of the argument file leads to unrestricted upload. The attack...

CVE-2024-4964: Unrestricted Upload of File with Dangerous Type

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-7000-40 V31R02B1413C and classified as critical. This vulnerability affects unknown code of the file /firewall/urlblist.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated...

PT-2024-27879

Name of the Vulnerable Software and Affected Versions Vesystem Cloud Desktop up to 20240408 Description A critical issue has been found in the processing of the file /Public/webuploader/0.1.5/server/fileupload2.php. The manipulation of the file argument leads to unrestricted upload. The attack ma...