CVE-2025-29017

CVE-2025-29017 - Internet Banking System 2.0.0 通过头像上传实现远程代码执行 描述 Code Astro Internet Banking System 2.0.0 中存在一个远程代码执行（RCE）漏洞，该漏洞源于 pagesviewclient.php 中 profilepic 参数的文件上传验证不严格。攻击者可以通过修改上传请求绕过安全检查，从而实现任意代码执行。 受影响组件 pagesviewclient.php 中的 profilepic 参数 上传功能允许执行恶意 PHP 文件 利用步骤 1...

User Profile Picture < 2.5.0 - Sensitive Information Disclosure

The REST API endpoint getusers in the User Profile Picture WordPress plugin before 2.5.0 returned more information than was required for its functionality to users with the uploadfiles capability. This included password hashes, hashed user activation keys, usernames, emails, and other less...

Langflow < 1.7.0 - Path Traversal

Langflow 1.7.1 contains a path traversal caused by insufficient filtering of foldername and filename parameters in downloadprofilepicture endpoint, letting attackers read secretkey across directories, exploit requires crafted request. id: CVE-2026-33497 info: name: Langflow 1.7.0 - Path Traversal...

CVE-2024-52302

CVE-2024-52302：常见用户管理中的无限制文件上传漏洞 概述 我在 common-user-management 中发现了一个关键的安全漏洞，这是一个稳健的 Spring Boot 应用程序，提供用于动态控制用户访问的用户管理服务。该漏洞影响 /api/v1/customer/profile-picture 端点，允许攻击者上传未经适当验证的文件，这可能导致远程代码执行（RCE） 。 漏洞利用代码 你可以使用以下 Python 脚本来利用此漏洞： root@kitploit: python exploit.py -u "customeruser" -p "yourpasswor...

CVE-2023-37790

CVE-2023-37790 Autor: KaizenSecurity Descripción: Se descubrió que Jaspersoft Clarity PPM versión 14.3.0.298 contiene una vulnerabilidad de carga de archivos arbitraria a través de la función de carga de foto de perfil. 1. https://nvd.nist.gov/vuln/detail/CVE-2023-37790 2...

CVE-2025-65675

CVE-2025-65675 Classroomio LMS 0.1.13 中存在存储型跨站脚本（XSS）漏洞，允许经过身份验证的攻击者通过精心构造的 SVG 个人资料图片执行任意代码。发现者：Rivek Raj Tamang RivuDon，印度锡金。 受影响产品：ClassroomIO 受影响版本：0.1.13 发现者：Rivek Raj Tamang RivuDon，印度锡金 漏洞详情 存储型跨站脚本 摘要 Classroomio LMS 0.1.13 版本存在存储型跨站脚本（XSS）漏洞，应用程序未能对 SVG 个人资料图片上传进行充分过滤。经过身份验证的攻击者可以上传包含嵌入式...

CVE-2026-91005

A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. This affects the function moveuploadedfile of the file production/editpicture.php of the component Profile Picture Upload. Performing a manipulation of the argument File results in unrestricted upload. The attack is...

CVE-2026-91005

SourceCodester Online Faculty Clearance System 1.0 is vulnerable to an unrestricted file upload in the Profile Picture Upload component. The flaw resides in the move_uploaded_file function within production/edit_picture.php , where manipulation of the File argument allows an attacker to upload ar...

CVE-2026-91005 SourceCodester Online Faculty Clearance System Profile Picture Upload edit_picture.php move_uploaded_file unrestricted upload

A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. This affects the function moveuploadedfile of the file production/editpicture.php of the component Profile Picture Upload. Performing a manipulation of the argument File results in unrestricted upload. The attack is...

EUVD-2026-78299

A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. This affects the function moveuploadedfile of the file production/editpicture.php of the component Profile Picture Upload. Performing a manipulation of the argument File results in unrestricted upload. The attack is...

CVE-2026-64969

ATutor is vulnerable to Insecure Direct Object Reference IDOR attack in profile picture related endpoints. Any authenticated user, including a student, can supply another user's memberid in a POST request to the profile album endpoint and permanently delete that user's profile picture, including...

CVE-2026-64969 Insecure Direct Object Reference in ATutor

ATutor is vulnerable to Insecure Direct Object Reference IDOR attack in profile picture related endpoints. Any authenticated user, including a student, can supply another user's memberid in a POST request to the profile album endpoint and permanently delete that user's profile picture, including...

EUVD-2026-63370

ATutor is vulnerable to Insecure Direct Object Reference IDOR attack in profile picture related endpoints. Any authenticated user, including a student, can supply another user's memberid in a POST request to the profile album endpoint and permanently delete that user's profile picture, including...

CVE-2026-64969 Insecure Direct Object Reference in ATutor

ATutor is vulnerable to Insecure Direct Object Reference IDOR attack in profile picture related endpoints. Any authenticated user, including a student, can supply another user's memberid in a POST request to the profile album endpoint and permanently delete that user's profile picture, including...

CVE-2026-64969

ATutor (last confirmed vulnerable at v2.2.4) has an IDOR flaw in its profile album endpoint: any authenticated user can POST another user's member_id and permanently delete that user's profile picture, including instructors and administrators. The product is no longer supported and unpatched. CVS...

CVE-2026-54020 Open WebUI: DNS Rebinding SSRF Bypass

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.11.0, Open WebUI resolved a hostname during URL validation and rejected private, loopback, and link-local addresses, but the HTTP clients resolved the hostname again at connection time. An authenticat...

WordPress User Profile Picture plugin <= 2.6.3 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin User Profile Picture versions = 2.6.3...

PYSEC-2026-2738 Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF) via Image URL Manipulation

Summary An application-wide Cross-Site Request Forgery CSRF vulnerability was found Open-WebUl's image uploading functionality. An attacker can set an image URL to a malicious endpoint, allowing them to perform actions on behalf of a victim user. Any authenticated user can exploit this...

CVE-2026-61971

Authorization Bypass Through User-Controlled Key vulnerability in Cozmoslabs User Profile Picture metronet-profile-picture allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Profile Picture: from n/a through = 2.6.3...

CVE-2026-61971 WordPress User Profile Picture plugin <= 2.6.3 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Cozmoslabs User Profile Picture metronet-profile-picture allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Profile Picture: from n/a through = 2.6.3...