CVE-2026-30290

InTouch Contacts & Caller ID APP v6.38.1 is affected by an arbitrary file overwrite vulnerability. The flaw occurs during the file import process , allowing an attacker to overwrite critical internal files. This could lead to arbitrary code execution or information exposure . No information regar...

PT-2026-29332

Name of the Vulnerable Software and Affected Versions InTouch Contacts & Caller ID APP version 6.38.1 Description An arbitrary file overwrite issue exists during the file import process. This allows attackers to overwrite critical internal files, which can result in arbitrary code execution or th...

PT-2026-29299

Name of the Vulnerable Software and Affected Versions FLY is FUN Aviation Navigation version 35.33 Description An arbitrary file overwrite issue exists in the file import process, which allows attackers to overwrite critical internal files. This can result in arbitrary code execution or informati...

CVE-2026-30285

An arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...

CVE-2026-30285

The blockchain platform Zora: Post, Trade, Earn Crypto version 2.60.0 contains an arbitrary file overwrite vulnerability. The root cause is an issue during the file import process , which allows attackers to overwrite critical internal files. This flaw can lead to arbitrary code execution or info...

PT-2026-29300

Name of the Vulnerable Software and Affected Versions Squareapps LLC My Location Travel Timeline version 11.80 Description An arbitrary file overwrite issue exists in the file import process, which allows attackers to overwrite critical internal files. This can lead to arbitrary code execution or...

PT-2026-29301

Name of the Vulnerable Software and Affected Versions UXGROUP LLC Cast to TV Screen Mirroring version 2.2.77 Description A file overwrite issue exists in UXGROUP LLC Cast to TV Screen Mirroring version 2.2.77. Attackers can overwrite critical internal files through the file import process. This...

CVE-2026-30281

An arbitrary file overwrite vulnerability in MaruNuri LLC v2.0.23 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...

Squareapps My Location Travel Timeline 安全漏洞

Squareapps My Location Travel Timeline is a map-based application developed by Squareapps that records users’ travel trajectories and generates travel timelines. Version 11.80 of Squareapps My Location Travel Timeline contains a security vulnerability. This vulnerability stems from an issue with...

CVE-2026-30278

An arbitrary file overwrite vulnerability in FLY is FUN Aviation Navigation v35.33 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...

CVE-2026-30283

The mobile application PEAKSEL D.O.O. NIS Animal Sounds and Ringtones v1.3.0 is vulnerable to an arbitrary file overwrite vulnerability. The root cause is an improper limitation of a pathname to a restricted directory during the file import process. This flaw allows an attacker to overwrite criti...

CVE-2020-37138

10-Strike Network Inventory Explorer 9.03 contains a buffer overflow vulnerability in the file import functionality that allows remote attackers to execute arbitrary code. Attackers can craft a malicious text file with carefully constructed payload to trigger a stack-based buffer overflow and...

CVE-2025-69618

An arbitrary file overwrite vulnerability in the file import process of Tarot, Astro & Healing v11.4.0 allows attackers to overwrite critical internal files, potentially leading to arbitrary code execution or exposure of sensitive information...

Android Tools Comic Book Reader 安全漏洞

Android Tools Comic Book Reader is a comic reading app developed by the Russian company Android Tools. Version 1.0.95 of Android Tools Comic Book Reader contains a security vulnerability. This vulnerability stems from an issue with file import processes, where arbitrary files can be overwritten,...

AB Document Reader: PDF, DOC, PPT 安全漏洞

AB Document Reader: PDF, DOC, PPT is a document reader from AB. A security vulnerability exists in AB Document Reader: PDF, DOC, PPT version 65.0, which stems from a lack of security checks during the file import process and can lead to directory traversal...

EUVD-2016-1908

Malware in sbrugna...

EUVD-2021-11162

Malware in sbrugna...

CVE-2024-45515

An issue was discovered in Zimbra Collaboration ZCS through 10.1. A Cross-Site Scripting XSS vulnerability exists in Zimbra webmail due to insufficient validation of the content type metadata when importing files into the briefcase. Attackers can exploit this issue by crafting a file with...

CVE-2023-2252

The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file parameter when importing CSV files...

CVE-2022-3334

The Easy WP SMTP WordPress plugin before 1.5.0 unserialises the content of an imported file, which could lead to PHP object injection issue when an admin import intentionally or not a malicious file and a suitable gadget chain is present on the blog...