5544 matches found
Malware Campaign Exploits Popup Builder WordPress Plugin to Infect 3,900+ Sites
A new malware campaign is leveraging a high-severity security flaw in the Popup Builder plugin for WordPress to inject malicious JavaScript code. According to Sucuri, the campaign has infected more than 3,900 sites over the past three weeks. "These attacks are orchestrated from domains less than ...
SAP NetWeaver 代码注入漏洞
SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform mainly for SAP applications to provide development and runtime environment. A file upload vulnerability exists in SAP NetWeaver, which stems from the application's lack of effective...
PT-2024-20019 · Zoho · Manageengine Desktop Central
Name of the Vulnerable Software and Affected Versions: ManageEngine Desktop Central version 9, build 90055 Description: A critical flaw in ManageEngine Desktop Central poses a major security risk due to an unrestricted file upload vulnerability. This issue could allow a remote attacker to upload ...
PT-2024-19217 · Sap · Sap Netweaver Administrator As Java
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Administrator AS Java Administrator Log Viewer plug-in version 7.50 Description: The issue allows an attacker with high privileges to upload potentially dangerous files, which leads to a command injection vulnerability. This wou...
Exploit for CVE-2024-27697
FuguHub 8.4 Authenticated RCE Fuguhub is a Cloud Media Serve...
CVE-2024-27733
File Upload vulnerability in Byzro Network Smart s42 Management Platform v.S42 allows a local attacker to execute arbitrary code via the useratte/userattestation.php component...
BIT-SOLR-2023-50386 Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets
Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected...
CVE-2024-27747
A file upload vulnerability in Petrol Pump Management Software v.1.0 allows an attacker to achieve Remote Code Execution (RCE) . The root cause is an unrestricted file upload in the profile.php component, specifically through the email Image parameter. An attacker can upload a crafted payload (su...
File Upload Vulnerability in Teaching Management System of Hunan Qiangzhi Technology Development Co.
Hunan Strong Intelligence Technology Development Co., Ltd. is a domestic university informatization service provider and national high-tech enterprise. A file upload vulnerability exists in the Academic Affairs Management System of Hunan Qiangzhi Science and Technology Development Co...
IBM Security Guardium Security Vulnerabilities
IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A security vulnerability exists in IBM Security Guardium Ke...
CVE-2023-6585
The WP JobSearch WordPress plugin versions prior to 2.3.4 are vulnerable to an arbitrary file upload flaw because the plugin fails to validate files uploaded to the server. This oversight allows unauthenticated attackers to upload arbitrary files, such as PHP scripts , which can lead to Remote Co...
Ctcms Code Issues Vulnerabilities
Ctcms 赤兔cms is a video content management system from China's Red Rabbit Cms Ctcms company. Ctcms version 2.1.2 has a code issue vulnerability, the vulnerability stems from the file ctcms/apps/controllers/admin/Upsys.php has a file upload vulnerability...
CVE-2024-24714
CVE-2024-24714 affects the WordPress Icons Font Loader plugin (bPlugins) up to version 1.1.4, with an Unrestricted Upload of File with Dangerous Type vulnerability. Root cause: unrestricted file uploads of dangerous types. Impact per sources: HIGH (CVSS 3.1 7.2) including potential compromise via...
CVE-2024-25909
Summary of CVE-2024-25909 (WordPress WP Media folder): The WP Media folder plugin (WordPress) versions
CVE-2024-25410
flusity-CMS 2.33 is vulnerable to Unrestricted Upload of File with Dangerous Type in updatesetting.php...
PT-2024-21200 · Joomunited · Joomunited Wp Media Folder
Name of the Vulnerable Software and Affected Versions: JoomUnited WP Media folder versions n/a through 5.7.2 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type vulnerability in the JoomUnited WP Media folder. This vulnerability allows for the upload of files...
CVE-2024-22393 Apache Answer: Pixel Flood Attack by uploading the large pixel file
Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer.This issue affects Apache Answer: through 1.2.1. Pixel Flood Attack by uploading large pixel files will cause server out of memory. A logged-in user can cause such an attack by uploading an image when posting content...
GHSA-FR72-9665-W3GR Duplicate Advisory: Unrestricted file upload of user avatar images
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xrvh-rvc4-5m43. This link is maintained to preserve external references. Original Description An arbitrary file upload vulnerability in the Profile Image module of Kirby CMS v4.1.0 allows attackers to execute...
