CVE-2025-41720

A low privileged remote attacker can upload arbitrary data masked as a png file to the affected device using the webserver API because only the file extension is verified...

EUVD-2022-44611

Malicious code in bioql PyPI...

CVE-2024-27499

Bagisto v1.5.1 is vulnerable for Cross site scriptingXSS via png file upload vulnerability in product review option...

CVE-2024-39717

The Versa Director GUI provides an option to customize the look and feel of the user interface. This option is only available for a user logged with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin. Tenant level users do not have this privilege. The “Change Favicon” Favorite Icon...

Bagist Cross-site Scripting vulnerability

Bagisto is vulnerable to cross-site scripting XSS via png file upload vulnerability in product review option...

CVE-2024-27499

Bagisto v1.5.1 is vulnerable for Cross site scriptingXSS via png file upload vulnerability in product review option...

Cross site scripting

Bagisto v1.5.1 is vulnerable for Cross site scriptingXSS via png file upload vulnerability in product review option...

CVE-2024-27499

Bagisto v1.5.1 is vulnerable for Cross site scriptingXSS via png file upload vulnerability in product review option...

CVE-2024-27499

Bagisto v1.5.1 is vulnerable for Cross site scriptingXSS via png file upload vulnerability in product review option...

PT-2024-21921

Name of the Vulnerable Software and Affected Versions Bagisto version 1.5.1 Description The issue is related to a cross-site scripting XSS vulnerability via png file upload in the product review option. This allows for potential malicious script execution. No information is provided about the...

CVE-2024-27499

Bagisto v1.5.1 is vulnerable to Cross-Site Scripting (XSS) due to insufficient validation of user-uploaded PNG files within the product review option . Specifically, the vulnerability exists in the ThemeCustomizationRepository.php file, which may allow attackers to inject malicious scripts and pe...

CVE-2024-27499

Bagisto v1.5.1 is vulnerable for Cross site scriptingXSS via png file upload vulnerability in product review option...

CVE-2024-27499

Bagisto v1.5.1 is vulnerable for Cross site scriptingXSS via png file upload vulnerability in product review option...

CVE-2024-27499: Improper Neutralization of Input During Web Page Generation

Bagisto v1.5.1 is vulnerable for Cross site scriptingXSS via png file upload vulnerability in product review option...

Design/Logic Flaw

AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a PNG Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability...

CVE-2022-41418

An issue in the component BlogEngine/BlogEngine.NET/AppCode/Api/UploadController.cs of BlogEngine.NET v3.3.8.0 allows attackers to execute arbitrary code via uploading a crafted PNG file...

CVE-2022-41418

An issue in the component BlogEngine/BlogEngine.NET/AppCode/Api/UploadController.cs of BlogEngine.NET v3.3.8.0 allows attackers to execute arbitrary code via uploading a crafted PNG file...

CVE-2022-41418: Improper Limitation of a Pathname to a Restricted Directory

An issue in the component BlogEngine/BlogEngine.NET/AppCode/Api/UploadController.cs of BlogEngine.NET v3.3.8.0 allows attackers to execute arbitrary code via uploading a crafted PNG file...