5532 matches found
PT-2025-41842
Name of the Vulnerable Software and Affected Versions SAP Supplier Relationship Management affected versions not specified Description SAP Supplier Relationship Management does not properly verify the type or content of uploaded files. This allows an authenticated attacker to upload arbitrary...
Voting System voters_add.php File Upload Vulnerability
Voting System is an election system. Voting System has a file upload vulnerability that stems from the lack of valid validation of uploaded files by the parameter photo in file /admin/votersadd.php. An attacker can exploit this vulnerability to upload malicious files...
CVE-2025-11635 Tomofun Furbo 360 File Upload resource consumption
A weakness has been identified in Tomofun Furbo 360 up to FB0035FW036. This vulnerability affects unknown code of the component File Upload. This manipulation causes resource consumption. Remote exploitation of the attack is possible. The vendor was contacted early about this disclosure but did n...
CVE-2025-33096 IBM Engineering Requirements Management Doors Next denial of service
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user to cause a denial of service by uploading specially crafted files using uncontrolled recursion...
dzzoffice_upload
It is an offensive tool for web application exploitation. The re...
MingSoft MCMS 安全漏洞
MingSoft MCMS is a complete open source J2ee system from China's MingFei MingSoft. A security vulnerability exists in MingSoft MCMS version v6.0.1, which originates from allowing the upload of specially crafted files and could lead to the execution of arbitrary code...
PT-2025-41471
Name of the Vulnerable Software and Affected Versions Newforma Info Exchange NIX versions prior to 2023.1 Description Newforma Info Exchange NIX contains a flaw in the /UserWeb/Common/UploadBlueimp.ashx API endpoint that allows an authenticated attacker to upload arbitrary files to any location...
FlowiseAI/Flosise has File Upload vulnerability
Summary A file upload vulnerability in FlowiseAI allows authenticated users to upload arbitrary files without proper validation. This enables attackers to persistently store malicious Node.js web shells on the server, potentially leading to Remote Code Execution RCE. Details The system fails to...
EUVD-2025-33191
FlowiseAI/Flosise has File Upload vulnerability...
Exploit for CVE-2025-10353
CVE-2025-10353 - File Upload RCE PoC 🛠️ Exploit for CVE-202...
code-projects Voting System 代码问题漏洞
Voting System is an election system. Voting System has a file upload vulnerability that stems from the lack of valid validation of uploaded files by the parameter photo in file /admin/votersadd.php. An attacker can exploit this vulnerability to upload malicious files...
CVE-2025-61687
Flowise is a drag & drop user interface to build a customized large language model flow. A file upload vulnerability in version 3.0.7 of FlowiseAI allows authenticated users to upload arbitrary files without proper validation. This enables attackers to persistently store malicious Node.js web...
EUVD-2020-4280
Malware in sbrugna...
EUVD-2007-3528
Malware in sbrugna...
EUVD-2006-6862
Malware in sbrugna...
EUVD-2021-20375
Malware in sbrugna...
EUVD-2008-1336
Malware in sbrugna...
EUVD-2020-16505
Malware in sbrugna...