Lucene search
+L

47895 matches found

NVD
NVD
added 2026/01/27 4:16 p.m.13 views

CVE-2025-69565

code-projects Mobile Shop Management System 1.0 is vulnerable to File Upload in /ExAddProduct.php...

9.8CVSS0.00439EPSS
SaveExploits1References2
OSV
OSV
added 2026/01/27 4:16 p.m.9 views

CVE-2020-36942

Victor CMS 1.0 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the profile image upload feature. Attackers can upload a PHP shell to the /img directory and execute system commands by accessing the uploaded file via web browser...

8.8CVSS5.9AI score0.00621EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/01/27 3:23 p.m.7 views

CVE-2020-36942

Victor CMS 1.0 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the profile image upload feature. Attackers can upload a PHP shell to the /img directory and execute system commands by accessing the uploaded file via web browser...

8.8CVSS6AI score0.00621EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/27 3:23 p.m.7 views

CVE-2020-36942 Victor CMS 1.0 - File Upload To RCE

Victor CMS 1.0 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the profile image upload feature. Attackers can upload a PHP shell to the /img directory and execute system commands by accessing the uploaded file via web browser...

8.8CVSS6AI score0.00621EPSS
SaveExploits1References3
EUVD
EUVD
added 2026/01/27 3:23 p.m.12 views

EUVD-2020-30860

Victor CMS 1.0 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the profile image upload feature. Attackers can upload a PHP shell to the /img directory and execute system commands by accessing the uploaded file via web browser...

8.8CVSS6AI score0.00621EPSS
SaveExploits1References3
NVD
NVD
added 2026/01/27 9:15 a.m.15 views

CVE-2026-24815

Unrestricted Upload of File with Dangerous Type, Deserialization of Untrusted Data vulnerability in datavane tis tis-plugin/src/main/java/com/qlangtech/tis/extension/impl modules. This vulnerability is associated with program files XmlFile.Java. This issue affects tis: before v4.3.0...

10CVSS0.00299EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/01/27 8:51 a.m.14 views

EUVD-2026-4764

Unrestricted Upload of File with Dangerous Type, Deserialization of Untrusted Data vulnerability in datavane tis tis-plugin/src/main/java/com/qlangtech/tis/extension/impl modules. This vulnerability is associated with program files XmlFile.Java. This issue affects tis: before v4.3.0...

10CVSS5.9AI score0.00299EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/27 8:51 a.m.12 views

CVE-2026-24815 A XStream Security Vulnerability in XML Deserialization in datavane/tis

Unrestricted Upload of File with Dangerous Type, Deserialization of Untrusted Data vulnerability in datavane tis tis-plugin/src/main/java/com/qlangtech/tis/extension/impl modules. This vulnerability is associated with program files XmlFile.Java. This issue affects tis: before v4.3.0...

10CVSS5.9AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/01/27 8:51 a.m.40 views

CVE-2026-24815 A XStream Security Vulnerability in XML Deserialization in datavane/tis

Unrestricted Upload of File with Dangerous Type, Deserialization of Untrusted Data vulnerability in datavane tis tis-plugin/src/main/java/com/qlangtech/tis/extension/impl modules. This vulnerability is associated with program files XmlFile.Java. This issue affects tis: before v4.3.0...

10CVSS0.00299EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/27 8:51 a.m.9 views

CVE-2026-24815

Unrestricted Upload of File with Dangerous Type, Deserialization of Untrusted Data vulnerability in datavane tis tis-plugin/src/main/java/com/qlangtech/tis/extension/impl modules. This vulnerability is associated with program files XmlFile.Java. This issue affects tis: before v4.3.0...

10CVSS5.9AI score0.00299EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/27 7:56 a.m.12 views

Malicious code in fileupload-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cfeee070d9e37cd2dda0d7557f93098e1589be17d77ff38abf265f564574ca3 The package fileupload-core was found to contain malicious code. Source: ghsa-malware aa58dfc19074922a9db4713e1aa1c17edc8de5a937d01a5c08271d4940bcc38...

5.8AI score
SaveExploits0References1
Patchstack
Patchstack
added 2026/01/27 6:13 a.m.19 views

WordPress Hustle plugin <= 7.8.9.2 - Authenticated (Subscriber+) Arbitrary File Upload via Module Import vulnerability

Authenticated Subscriber+ Arbitrary File Upload via Module Import vulnerability discovered by Williwollo CybrX in WordPress Plugin Hustle versions = 7.8.9.2...

7.5CVSS5.9AI score0.00552EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2026/01/27 12:00 a.m.14 views

Victor CMS code-related vulnerabilities

Victor CMS is an open-source content management system developed by Victor Alagwu in Nigeria. Version 1.0 of Victor CMS has code-related vulnerabilities; these vulnerabilities stem from defects in the file upload functionality, which may lead to the upload and execution of malicious PHP files...

8.8CVSS5.9AI score0.00621EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/01/27 12:00 a.m.22 views

Code-Projects Mobile Shop Management System security vulnerabilities

Code-Projects Mobile Shop Management System is an open-source mobile store management system developed by Code-Projects. Version 1.0 of the code-projects Mobile Shop Management System contains a security vulnerability, which stems from a file upload vulnerability in the /ExAddProduct.php file...

9.8CVSS5.8AI score0.00439EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/01/27 12:00 a.m.6 views

CVE-2025-69559

code-projects Computer Book Store 1.0 is vulnerable to File Upload in adminadd.php...

5.9AI score0.0052EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/01/27 12:00 a.m.7 views

CVE-2025-69565

code-projects Mobile Shop Management System 1.0 is vulnerable to File Upload in /ExAddProduct.php...

5.9AI score0.00439EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/01/27 12:00 a.m.35 views

CVE-2025-69559

code-projects Computer Book Store 1.0 is vulnerable to File Upload in adminadd.php...

0.0052EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/01/27 12:00 a.m.6 views

CVE-2025-69559

code-projects Computer Book Store 1.0 is vulnerable to File Upload in adminadd.php...

5.9AI score0.0052EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/01/27 12:00 a.m.23 views

PT-2026-4890

Name of the Vulnerable Software and Affected Versions datavane tis versions prior to 4.3.0 Description An issue exists in datavane tis related to the unrestricted upload of files with dangerous types and deserialization of untrusted data. The issue is associated with the XmlFile.Java program file...

10CVSS5.9AI score0.00299EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/01/27 12:00 a.m.19 views

PT-2026-4924

Name of the Vulnerable Software and Affected Versions Victor CMS version 1.0 Description Victor CMS version 1.0 has a file upload issue. Authenticated users can upload malicious PHP files through the profile image upload feature. An attacker can upload a PHP shell to the /img directory and execut...

8.8CVSS5.6AI score0.00621EPSS
SaveExploits1References6
Rows per page
Query Builder