230 matches found
CVE-2022-42198
In Simple Exam Reviewer Management System v1.0 the User List function suffers from insecure file upload...
CVE-2019-20049
An issue was discovered on Alcatel-Lucent OmniVista 4760 devices. A remote unauthenticated attacker can chain a directory traversal which helps to bypass authentication with an insecure file upload to achieve Remote Code Execution as SYSTEM. The directory traversal is in the construct whereas the...
CVE-2024-27480
givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload...
CVE-2024-27480
givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload...
CVE-2024-27480
givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload...
CVE-2024-27480: Unrestricted Upload of File with Dangerous Type
givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload...
CVE-2024-27480
givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload...
VvvebJs 安全漏洞
VvvebJs is a drag-and-drop website generator from Givan Personal Developers. A security vulnerability exists in VvvebJs version 1.7.2, which stems from an insecure file upload...
PT-2025-53791
Name of the Vulnerable Software and Affected Versions givanz VvvebJs version 1.7.2 Description givanz VvvebJs version 1.7.2 is susceptible to Insecure File Upload. This allows for the potential upload of malicious files. Recommendations At the moment, there is no information about a newer version...
CVE-2024-27480
CVE-2024-27480 involves givanz VvvebJs, version 1.7.2, which is vulnerable to an Insecure File Upload. The connected Red Hat/NVD entries confirm this specific version is affected and that the vulnerability can impact confidentiality, integrity, and availability (per CVSS 3.1 metrics: AV:N/AC:L/PR...
CVE-2024-27480
givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload...
CVE-2024-58313
xbtitFM 4.1.18 contains an insecure file upload vulnerability that allows authenticated attackers with administrative privileges to upload and execute arbitrary PHP code through the filehosting feature. Attackers can bypass file type restrictions by modifying the Content-Type header to image/gif,...
CVE-2024-58313 xbtitFM 4.1.18 Insecure File Upload in file_hosting Feature
xbtitFM 4.1.18 contains an insecure file upload vulnerability that allows authenticated attackers with administrative privileges to upload and execute arbitrary PHP code through the filehosting feature. Attackers can bypass file type restrictions by modifying the Content-Type header to image/gif,...
xbtitFM 代码问题漏洞
xbtitFM is a BitTorrent tracker software by the individual developer of xbtitFM. A code issue vulnerability exists in xbtitFM version 4.1.18, which stems from an insecure file upload in the filehosting function that could lead to the execution of arbitrary PHP code...
EUVD-2025-34916
DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a stored cross-site scripting vulnerability exists due to improper file upload validation and authentication bypass. The StaticResourceApi interface defines a route upload/fileId that uses a URL path...
CVE-2025-35055
Newforma Info Exchange (NIX) contains a file-upload vulnerability in /UserWeb/Common/UploadBlueimp.ashx that allows an authenticated attacker to upload arbitrary files to writable locations, enabling web-shell execution or directory deletion. Related CNVD and Red Hat entries describe a broader ri...
CVE-2025-35055 Newforma Info Exchange (NIX) insecure file upload
Newforma Info Exchange NIX '/UserWeb/Common/UploadBlueimp.ashx' allows an authenticated attacker to upload an arbitrary file to any location writable by the NIX application. An attacker can upload and run a web shell or other content executable by the web server. An attacker can also delete...
EUVD-2020-7481
Malware in sbrugna...