EUVD-2025-1825

Malicious code in bioql PyPI...

EUVD-2025-13374

Malicious code in bioql PyPI...

EUVD-2022-47299

Malicious code in bioql PyPI...

EUVD-2025-21034

Malicious code in bioql PyPI...

EUVD-2023-28535

Malicious code in bioql PyPI...

EUVD-2022-31938

Malicious code in bioql PyPI...

EUVD-2025-28109

Malicious code in bioql PyPI...

EUVD-2023-59054

Malicious code in bioql PyPI...

CVE-2025-11020 Remote Code Execution in MarkAny SafePC Enterprise

An attacker can obtain server information using Path Traversal vulnerability to conduct SQL Injection, which possibly exploits Unrestricted Upload of File with Dangerous Type vulnerability in MarkAny SafePC Enterprise on Windows, Linux.This issue affects SafePC Enterprise: V7.0. V7.0.YYYY.MM.DD...

CVE-2025-11221

CVE-2025-11221 affects GTONE ChangeFlow. The issue arises from improper pathname restrictions and unrestricted upload of files with dangerous types, enabling path traversal and access to functionality not properly constrained by ACLs. Affected versions: ChangeFlow up to v9.0.1.1 (inclusive). Root...

PT-2025-40315

Name of the Vulnerable Software and Affected Versions GTONE ChangeFlow versions through 9.0.1.1 Description The software contains issues related to improper limitation of a pathname to a restricted directory Path Traversal and unrestricted upload of files with dangerous types. These issues can le...

CVE-2025-8120 Remote Code Execution via Unrestricted File Upload in PAD CMS

Due to client-controlled permission check parameter, PAD CMS's upload photo functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can then be executed leading to Remote Code Execution.This issue affects all 3 templates: www, b...

CVE-2025-7065 Remote Code Execution via Unrestricted File Upload in PAD CMS

Due to client-controlled permission check parameter, PAD CMS's photo upload functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can then be executed leading to Remote Code Execution. This issue affects all 3 templates: www,...

CVE-2025-7065

The CVE-2025-7065 entry involves PAD CMS photo upload where a client-controlled permission-check parameter allows unauthenticated remote attackers to upload files of any type/extension, potentially leading to Remote Code Execution. Affected are all three templates: www, bip, and ww+bip. The under...

CVE-2025-7065 Remote Code Execution via Unrestricted File Upload in PAD CMS

Due to client-controlled permission check parameter, PAD CMS's photo upload functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can then be executed leading to Remote Code Execution. This issue affects all 3 templates: www,...

CVE-2025-7063

CVE-2025-7063 affects PAD CMS file upload: due to a client-controlled permission check parameter, an unauthenticated attacker can upload arbitrary files, which can then be executed to achieve Remote Code Execution. Impacts all three templates (www, bip, ww+bip). The product is End-Of-Life and pat...

CVE-2025-7063 Remote Code Execution via Unrestricted File Upload in PAD CMS

Due to client-controlled permission check parameter, PAD CMS's file upload functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can then be executed leading to Remote Code Execution. This issue affects all 3 templates: www, b...

CVE-2025-7063 Remote Code Execution via Unrestricted File Upload in PAD CMS

Due to client-controlled permission check parameter, PAD CMS's file upload functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can then be executed leading to Remote Code Execution. This issue affects all 3 templates: www, b...

CVE-2025-10544

Unrestricted file upload vulnerability in DocAve 6.13.2, Perimeter 1.12.3, Compliance Guardian 4.7.1, and earlier versions, allowing administrator users to upload files without proper validation. An attacker could exploit this vulnerability by uploading malicious files that compromise the system...

CVE-2025-10544 Unrestricted uploading of dangerous file types to AvePoint products

Unrestricted file upload vulnerability in DocAve 6.13.2, Perimeter 1.12.3, Compliance Guardian 4.7.1, and earlier versions, allowing administrator users to upload files without proper validation. An attacker could exploit this vulnerability by uploading malicious files that compromise the system...