EUVD-2025-33760

An arbitrary file upload vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2025-60838

An arbitrary file upload vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2025-60838

An arbitrary file upload vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2025-60268

An arbitrary file upload vulnerability exists in JeeWMS 20250820, which is caused by the lack of file checking in the saveFiles function in /jeewms/cgUploadController.do. An attacker with normal privileges was able to upload a malicious file that would lead to remote code execution...

CVE-2025-60268

An arbitrary file upload vulnerability exists in JeeWMS 20250820, which is caused by the lack of file checking in the saveFiles function in /jeewms/cgUploadController.do. An attacker with normal privileges was able to upload a malicious file that would lead to remote code execution...

Exploit for CVE-2023-29386

PoC exploit for CVE-2023-29386, an unauthenticated arbitrary fil...

CVE-2025-60838

An arbitrary file upload vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2025-60268

An arbitrary file upload vulnerability exists in JeeWMS 20250820, which is caused by the lack of file checking in the saveFiles function in /jeewms/cgUploadController.do. An attacker with normal privileges was able to upload a malicious file that would lead to remote code execution...

Ivanti Endpoint Manager UniqueFilename Unrestricted File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Alternatively, no user interaction is...

PT-2025-41588

Name of the Vulnerable Software and Affected Versions MCMS version 6.0.1 Description An arbitrary file upload issue exists in MCMS version 6.0.1, potentially allowing attackers to execute code by uploading a specially crafted file. Recommendations At the moment, there is no information about a...

CVE-2025-60880

An authenticated stored XSS vulnerability exists in the Bagisto 2.3.6 admin panel's product creation path, allowing an attacker to upload a crafted SVG file containing malicious JavaScript code. This vulnerability can be exploited by an authenticated admin user to execute arbitrary JavaScript in...

CVE-2025-60268

CVE-2025-60268 describes an arbitrary file upload vulnerability in JeeWMS 20250820 caused by lack of file validation in the saveFiles function at /jeewms/cgUploadController.do. An attacker with normal privileges could upload a malicious file, potentially enabling remote code execution. Several co...

CVE-2025-60268

An arbitrary file upload vulnerability exists in JeeWMS 20250820, which is caused by the lack of file checking in the saveFiles function in /jeewms/cgUploadController.do. An attacker with normal privileges was able to upload a malicious file that would lead to remote code execution...

Kibana 7.0.x <= 7.17.29 / 8.0.x <= 8.18.7 / 8.19.x <= 8.19.4 / 9.0.x <= 9.0.7 / 9.1.x <= 9.1.4 Multiple XSS (ESA-2025-17, ESA-2025-20)

The version of Kibana running on the remote host is prior to 7.0 prior to 7.17.29, 8.0 prior to 8.18.7, 8.19 prior to 8.19.4, 9.0 prior to 9.0.7 and 9.1 prior to 9.1.4. It is, therefore, affected by a cross-site scripting vulnerability as referenced in the ESA-2025-17, ESA-2025-20 advisory. -...

PT-2025-41587

Name of the Vulnerable Software and Affected Versions JeeWMS version 20250820 Description An arbitrary file upload issue exists due to insufficient file validation within the saveFiles function located at the /jeewms/cgUploadController.do endpoint. An attacker with standard user privileges can...

CVE-2025-60838

An arbitrary file upload vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2025-60838

MCMS v6.0.1 has an arbitrary file upload vulnerability (CVE-2025-60838) that could allow an attacker to execute arbitrary code by uploading a crafted file. This vulnerability is consistently described across multiple sources (NVD, Red Hat, ENISA EUVD, CVE List, CNNVD, etc.). The available documen...

MingSoft MCMS 安全漏洞

MingSoft MCMS is a complete open source J2ee system from China's MingFei MingSoft. A security vulnerability exists in MingSoft MCMS version v6.0.1, which originates from allowing the upload of specially crafted files and could lead to the execution of arbitrary code...

EUVD-2025-33572

Newforma Info Exchange NIX '/UserWeb/Common/UploadBlueimp.ashx' allows an authenticated attacker to upload an arbitrary file to any location writable by the NIX application. An attacker can upload and run a web shell or other content executable by the web server. An attacker can also delete...

CVE-2025-35055

Newforma Info Exchange NIX '/UserWeb/Common/UploadBlueimp.ashx' allows an authenticated attacker to upload an arbitrary file to any location writable by the NIX application. An attacker can upload and run a web shell or other content executable by the web server. An attacker can also delete...