69 matches found
CVE-2025-56218
An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted PDF file...
SigningHub 安全漏洞
SigningHub is an electronic signature platform from SigningHub UK. A security vulnerability exists in SigningHub version v8.6.8, which stems from allowing the upload of specially crafted PDF files and could lead to the execution of arbitrary code...
CVE-2025-56218
An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted PDF file...
CVE-2025-56218
The SigningHub electronic signature platform by Ascertia is vulnerable to an unrestricted file upload vulnerability in versions prior to or equal to 8.6.8 . An authenticated remote attacker can upload a crafted Excel file containing malicious scripts or phishing URLs. The application converts the...
CVE-2025-56221
The SigningHub electronic signature platform by Ascertia is vulnerable to an authentication bypass via a brute force attack. The root cause is a lack of rate limiting on the authentication API (/authenticate) in versions 8.6.8 or implement rate limiting and account lockout mechanisms for the aut...
CVE-2025-56221
A lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to bypass authentication via a brute force attack...
SigningHub 安全漏洞
SigningHub is an electronic signature platform from SigningHub UK. A security vulnerability exists in SigningHub version 8.6.8, which stems from a lack of rate limiting in the login mechanism and could lead to a brute force attack to bypass authentication...