169 matches found
Exploit for Improper Neutralization of Wildcards or Matching Symbols in Laravel Framework
CVE-2025-27515 Proof of Concept A practical demonstration of...
InnovaStudio WYSIWYG Editor 代码问题漏洞
InnovaStudio WYSIWYG Editor is a rich text editor from InnovaStudio, Inc. A code issue vulnerability exists in InnovaStudio WYSIWYG Editor version 5.4, which stems from a file upload restriction bypass that could lead to the upload of malicious files...
CVE-2025-48985
The CVE-2025-48985 vulnerability affects Vercel’s AI SDK, with fixes in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. The issue is an input-validation bypass that could allow bypassing filetype whitelists during file uploads. Connected sources confirm remediation via upgrading the AI SDK. Impact...
Exploit for Unrestricted Upload of File with Dangerous Type in Pluck-Cms Pluck
Pluck CMS 4.7.13 File Upload RCE Exploit !Exploit Bannerht...
CVE-2025-62421
DataEase CVE-2025-62421 affects DataEase 2.10.13 and earlier. A stored Cross-Site Scripting vulnerability arises from improper file upload validation and authentication bypass, where the StaticResourceApi route upload/{fileId} allows user-controlled filename/extension. During permission checks, a...
CVE-2025-62421 DataEase vulnerable to stored cross-site scripting via file upload bypass
DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a stored cross-site scripting vulnerability exists due to improper file upload validation and authentication bypass. The StaticResourceApi interface defines a route upload/fileId that uses a URL path...
CVE-2025-62421 DataEase vulnerable to stored cross-site scripting via file upload bypass
DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a stored cross-site scripting vulnerability exists due to improper file upload validation and authentication bypass. The StaticResourceApi interface defines a route upload/fileId that uses a URL path...
EUVD-2020-5696
Malware in sbrugna...
EUVD-2006-3067
Malware in sbrugna...
EUVD-2019-6730
Malware in sbrugna...
EUVD-2015-3094
Malware in sbrugna...
EUVD-2022-1930
Malicious code in bioql PyPI...
EUVD-2022-3727
Malicious code in bioql PyPI...
EUVD-2021-32739
Malicious code in bioql PyPI...
EUVD-2022-2685
Malicious code in bioql PyPI...
CVE-2025-58745
The CVE-2025-58745 entry concerns WeGIA, a Web manager for charitable institutions. Technical details from connected documents show an arbitrary file upload vulnerability where MIME-type validation for Excel files at /html/socio/sistema/controller/controla_xlsx.php can be bypassed by embedding Ex...
Exploit for CVE-2025-58440
CVE-2025-58440 Remote Code Execution RCE via Polyglot File A...
Linux Distros Unpatched Vulnerability : CVE-2020-13675
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Drupal's JSON:API and REST/File modules allow file uploads through their HTTP APIs. The modules do not correctly run all file validation, which causes an access...
CVE-2019-17352
In JFinal cos before 2019-08-13, as used in JFinal 4.4, there is a vulnerability that can bypass the isSafeFile function: one can upload any type of file. For example, a .jsp file may be stored and almost immediately deleted, but this deletion step does not occur for certain exceptions...