56520 matches found
WordPress DS Ad Rotator plugin <= 0.8 - Unauthenticated Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload vulnerability discovered by Huynh Kien Minh in WordPress Plugin DS Ad Rotator versions = 0.8...
WordPress WP images upload on piclect plugin <= 1.0 - Unauthenticated Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload vulnerability discovered by João Ramos Maciel in WordPress Plugin WP images upload on piclect versions = 1.0...
Multiple vulnerabilities in Contec PC-HELPER series
Overview PC-HELPER series provided by Contec Co., Ltd. contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2026-82790 Cross-site request forgery CWE-352 - CVE-2026-82764 OS command injection CWE-78 - CVE-2026-82791 Cross-site scripting CWE-79 - CVE-2026-82792...
CVE-2026-82780
Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote authenticated attacker, an arbitrary command may be executed on the product...
CVE-2026-82793
Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If a specially crafted file is uploaded by a remote authenticated attacker, arbitrary code may be executed on the product...
CVE-2026-82793
Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If a specially crafted file is uploaded by a remote authenticated attacker, arbitrary code may be executed on the product...
CVE-2026-82793
CVE-2026-82793 affects the Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit , an industrial communication device. The root cause is an unrestricted file upload with dangerous type : a remote authenticated attacker can upload a specially crafted file, leading to arbitrary code execu...
EUVD-2026-77249
Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If a specially crafted file is uploaded by a remote authenticated attacker, arbitrary code may be executed on the product...
CVE-2026-82780
An unrestricted file upload vulnerability (dangerous file type) affects the CONPROSYS TM Series by Consec . A remote authenticated attacker can upload a specially crafted file to achieve arbitrary command execution on the product. The flaw is scored CVSS 3.1: 8.8 (HIGH) — network vector, low comp...
CVE-2026-82780
Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote authenticated attacker, an arbitrary command may be executed on the product...
CVE-2026-82780
Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote authenticated attacker, an arbitrary command may be executed on the product...
EUVD-2026-77233
Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote authenticated attacker, an arbitrary command may be executed on the product...
CVE-2023-34854
HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function...
CVE-2023-34854
HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function...
PT-2026-91084
Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote authenticated attacker, an arbitrary command may be executed on the product...
CVE-2026-54177: Unrestricted Upload of File with Dangerous Type
backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.38, HasUploadFields methods uploadFileToDisk and uploadMultipleFilesToDisk, used through CrudTrait...
CVE-2026-57581: Unrestricted Upload of File with Dangerous Type
DotVVM is an open source MVVM framework for web applications. Prior to 4.2.11, 4.3.15, and 5.0.0-preview09-final, applications with configured file upload storage allow unauthenticated users to submit files directly to DotvvmFileUploadMiddleware without an X-DotVVM-UploadToken generated by the...
EUVD-2023-60662
HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function...