CVE-2023-39539

CVE-2023-39539 corresponds to a vulnerability in AMI AptioV BIOS where a user with local access can trigger an unrestricted upload of a PNG logo file (via the BMP Logo Handler) with a dangerous type. The underlying issue is described as a local elevation/impactful modification of boot-time/logo h...

CVE-2023-39538: Improper Input Validation

AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a BMP Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability...

AMI AptioV Code Issue Vulnerability

AMI AptioV is a firmware from AMI. A security vulnerability exists in AMI AptioV that stems from a vulnerability contained in the BIOS, where a user may be able to locally upload a dangerous type of PNG Logo file, which could be exploited by an attacker to cause a loss of system confidentiality,...

CVE-2023-39539: Improper Input Validation

AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a PNG Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability...

PT-2023-8203 · Ami · Ami Aptiov

Name of the Vulnerable Software and Affected Versions: AMI AptioV affected versions not specified Description: The issue is related to a vulnerability in the BIOS of AMI AptioV, specifically in the handling of BMP Logo files. This vulnerability allows a user with local access to upload a BMP Logo...

PT-2023-8204 · Ami · Ami Aptiov

Name of the Vulnerable Software and Affected Versions: AMI AptioV affected versions not specified Description: The issue is related to the BMP Logo Handler component in the AMI AptioV BIOS setup utility, which allows for an unrestricted upload of dangerous file types, including PNG logo files. Th...

Exploit for Code Injection in Craterapp Crater

Crater-CVE-2023-46865-RCE Crater =6.0.6, CVE-2023-46865 Po...

WordPress WP Logo Showcase Responsive Slider and Carousel Plugin <= 3.6 is vulnerable to Broken Access Control

Software WP Logo Showcase Responsive Slider and Carousel Type Plugin Vulnerable versions = 3.6 Fixed in 3.7 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40200 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 6513d49257c3...

CVE-2023-46865

/api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an image/png IDAT chunk of a Company Logo image...

CVE-2023-46865

/api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an image/png IDAT chunk of a Company Logo image...

CVE-2023-5796

A vulnerability was found in CodeAstro POS System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /setting of the component Logo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been...

CVE-2023-5796

A vulnerability was found in CodeAstro POS System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /setting of the component Logo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been...

Out-of-bounds

A vulnerability was found in CodeAstro POS System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /setting of the component Logo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been...

CVE-2023-5796 CodeAstro POS System Logo setting unrestricted upload

A vulnerability was found in CodeAstro POS System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /setting of the component Logo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been...

PT-2023-32334 · Unknown · Codeastro Pos System

Name of the Vulnerable Software and Affected Versions: CodeAstro POS System version 1.0 Description: A critical issue affects some unknown functionality of the file /setting of the component Logo Handler, leading to unrestricted upload. The attack can be launched remotely. Recommendations: For...

CVE-2023-5796: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in CodeAstro POS System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /setting of the component Logo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been...

Pharmacy Point Of Sale System Code Issue Vulnerability

Pharmacy Point Of Sale System is a web-based application by Carlo Montero, an individual developer. It is used to help a pharmacy manage its sales transactions. A security vulnerability exists in Pharmacy Point Of Sale System version 1.0 due to the presence of an unknown function in the setting o...

CVE-2023-45370

An issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. SportsTeams: Special:SportsManagerLogo and Special:SportsTeamsManagerLogo do not check for the sportsteamsmanager user right, and thus an attacker may ...

Online ID Generator 1.0 - Remote Code Execution Vulnerability

Title: Online ID Generator 1.0 - Remote Code Execution RCE Author: nu11secur1ty Vendor: https://www.youtube.com/watch?v=JdB9po5DTc Software: https://www.sourcecodester.com/sites/default/files/download/oretnom23/idgenerator0.zip Reference: https://portswigger.net/web-security/sql-injection...

PT-2023-8949 · Mediawiki +2 · Mediawiki Sportsteams Extension +2

Name of the Vulnerable Software and Affected Versions: MediaWiki SportsTeams extension versions prior to 1.35.12 MediaWiki SportsTeams extension versions 1.36.x through 1.39.x before 1.39.5 MediaWiki SportsTeams extension versions 1.40.x before 1.40.1 Description: An issue was discovered in the...