CVE-2026-125881 Schema-hint SSRF via service import schema validation

Server-Side request forgery SSRF vulnerability in N-able N-central allows Server Side Request Forgery. This issue affects N-central: before 26.4.1...

CVE-2026-125881

A Server-Side Request Forgery (SSRF) vulnerability exists in N-able N-central versions prior to 26.4.1 . The flaw is caused by improper service import schema validation using a schema-hint. This vulnerability allows an attacker to perform SSRF attacks against the server. No specific exploit code ...

CVE-2026-33137 XWiki Platform has an Unauthenticated XAR Import via REST /wikis/{wikiName}

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform is a generic wiki platform. In versions starting with 15.10.6 and prior to 18.1.0-rc-1, 17.10.3, 17.4.9, and 16.10.17, the POST /wikis/wikiName API executes a XAR import without...

CVE-2021-28023

Arbitrary file upload in Service import feature in ServiceTonic Helpdesk software version 9.0.35937 allows a malicious user to execute JSP code by uploading a zip that extracts files in relative paths...

CVE-2021-28023

Arbitrary file upload in Service import feature in ServiceTonic Helpdesk software version 9.0.35937 allows a malicious user to execute JSP code by uploading a zip that extracts files in relative paths...

ServiceTonic Helpdesk Software code-related vulnerabilities

ServiceTonic is an ITIL-compliant service desk and enterprise service software. serviceTonic versions prior to 9.0.35937 have an arbitrary file upload vulnerability in the service import feature. An attacker could exploit the vulnerability to execute JSP code by uploading a zip file that extracts...

CVE-2021-28023: Unrestricted Upload of File with Dangerous Type

Arbitrary file upload in Service import feature in ServiceTonic Helpdesk software version 9.0.35937 allows a malicious user to execute JSP code by uploading a zip that extracts files in relative paths...

PT-2021-17712

Name of the Vulnerable Software and Affected Versions: ServiceTonic Helpdesk software version 9.0.35937 Description: The issue allows a malicious user to execute JSP code by uploading a zip file that extracts files in relative paths, leveraging the arbitrary file upload in the Service import...