ZOHO ManageEngine Log360 代码问题漏洞

ZOHO ManageEngine Log360 is an integrated log management and Active Directory auditing and alerting solution from ZOHO USA. The solution helps you mitigate security threats, detect persistent attack attempts, detect suspicious user activity, and comply with regulatory requirements.An input...

Pear Admin Think 代码问题漏洞

Pear Admin Think is an open source rapid development platform based on thinkphp6, with simple code generation features, you can quickly build your functional business. A security vulnerability exists in Pear Admin Think that allows an attacker to upload malicious files to remotely execute arbitra...

Remote Code Execution (RCE)

matrix-react-sdk is vulnerable to remote code execution. An attacker is able to exploit the vulnerability by accessing the local file preview when uploading a malicious file...

Exploit for Incorrect Authorization in Moodle

Python script to exploit CVE-2020-14321https://moodle.org/mod...

File Upload Vulnerability in ClassCMS

ClassCMS is a content management system. A file upload vulnerability exists in ClassCMS, which allows an attacker to upload a malicious file to getshell...

The vulnerability of WebReports servers stems from insufficient protection of the website structure, allowing attackers to upload malicious files and execute arbitrary code.

The vulnerability of the WebReports report server is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to download malicious files and execute arbitrary code...

CVE-2021-26596

An issue was discovered in Nokia NetAct 18A. A malicious user can change a filename of an uploaded file to include JavaScript code, which is then stored and executed by a victim's web browser. The most common mechanism for delivering malicious content is to include it as a parameter in a URL that...

CVE-2020-24984

An issue was discovered in Quadbase EspressReports ES 7 Update 9. It allows CSRF, whereby an attacker may be able to trick an authenticated admin level user into uploading malicious files to the web server...

F5 BIG-IP 代码问题漏洞

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A file upload vulnerability exists in the F5 BIG-IP, which can be exploited by an attacker to upload malicious files for furth...

Design/Logic Flaw

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software V2.1.13 and prior that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed...

CVE-2021-22697

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software V2.1.13 and prior that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed...

Security Bulletin: Malicious file upload and download could affect Watson Knowledge Catalog for IBM Cloud Pak for Data

Summary Watson Knowledge Catalog for IBM Cloud Pak for Data was vulnerable to malicious file uploads and downloads. The issue is now addressed. Vulnerability Details Third Party Entry: PSIRT-ADV0025909 DESCRIPTION: Created from Advisory: ADV0025909 CVSS Base score: 5.7 CVSS Vector:...

Schneider Electric EcoStruxure Power Build-Rapsody (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Schneider Electric Equipment: EcoStruxure Power Build-Rapsody Vulnerability: Unrestricted Upload of File with Dangerous Type 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled...

File Upload Vulnerability in Minfly Customized Software Version 8 Products

Mindfly customized software version 8 products for asp.net development of enterprise building system. There is a file upload vulnerability in Mintex Customized Software Version 8, which can be exploited by attackers to upload malicious files to gain server privileges...

Nextcloud Contacts Cross-Site Scripting Vulnerability (CNVD-2021-03032)

Nextcloud Contacts is the user interface for Nextcloud's CardDAV server. A cross-site scripting vulnerability exists in Nextcloud Contacts 3.3.0. The vulnerability stems from a missing file type check. An attacker can exploit this vulnerability by uploading a malicious SVG file to conduct a...

Kaixin Electronic Document Inventory in File Upload Vulnerability

Qixing electronic document library can be used to store departmental manuals, system specifications, mechanical drawings and other edoc. The Qixing Electronic Document Library suffers from a file upload vulnerability, which can be exploited by an attacker to upload a malicious file and take contr...

iSmartgate PRO Malicious File Upload Vulnerability

The iSmartgate PRO is a smart garage door opening system. A malicious file upload vulnerability exists in iSmartgate PRO 1.5.9. An attacker can exploit this vulnerability to upload a malicious file via a form that uploads an image to the garage door...

SAP NetWeaver Knowledge Management Code Issue Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A code issue vulnerability exists in SAP NetWeaver Knowledge Management, which can be exploited by attackers to...

Hainan Zanzan Network Technology Co., Ltd. aite cms there are file upload vulnerabilities

Aite cms specializes in corporate website building cms, providing a variety of corporate website templates. Hainan Zanzan Network Technology Co., Ltd Aite cms file upload vulnerability, attackers can use the vulnerability to upload malicious files to obtain control of the server...

OpenClinic GA Path Traversal Vulnerability

OpenClinic GA is an open source hospital information management system. The system supports financial management, clinical management and laboratory management and other functions. A path traversal vulnerability exists in OpenClinic GA versions 5.09.02 and 5.89.05b, which can be exploited by...