3419 matches found
CVE-2025-6802
CVE-2025-6802 affects Marvell QConvergeConsole and is tied to the getFileFromURL method, where lack of input validation permits unrestricted file uploads. The result is remote code execution with the attacker able to run code in the context of SYSTEM, and authentication is not required. Documents...
CVE-2025-6802 Marvell QConvergeConsole getFileFromURL Unrestricted File Upload Remote Code Execution Vulnerability
Marvell QConvergeConsole getFileFromURL Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole. Authentication is not required to exploit this vulnerability. The...
PT-2025-27876 · Unknown · Creedally Bulk Featured Image
Name of the Vulnerable Software and Affected Versions: CreedAlly Bulk Featured Image versions 1.2.1 and earlier Description: The issue allows uploading a Web Shell to a web server due to unrestricted file upload with dangerous file types. Recommendations: For CreedAlly Bulk Featured Image version...
CVE-2025-6872
A vulnerability classified as critical was found in SourceCodester Simple Company Website 1.0. This vulnerability affects unknown code of the file /classes/SystemSettings.php?f=updatesettings. The manipulation of the argument img leads to unrestricted upload. The attack can be initiated remotely...
CVE-2025-6848
A vulnerability, which was classified as critical, has been found in code-projects Simple Forum 1.0. This issue affects some unknown processing of the file /forum1.php. The manipulation of the argument File leads to unrestricted upload. The attack may be initiated remotely. The exploit has been...
CVE-2025-6900 code-projects Library System add-book.php unrestricted upload
A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-book.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclos...
CVE-2025-36519
Unrestricted upload of file with dangerous type issue exists in WRC-2533GST2, WRC-1167GST2, WRC-2533GST2, WRC-2533GS2V-B,WRC-2533GS2-B v1.69 and earlier, WRC-2533GS2-W, WRC-1167GST2, WRC-1167GS2-B, and WRC-1167GS2H-B. If a specially crafted file is uploaded by a remote authenticated attacker,...
VulnCheck KEV: CVE-2025-34511
Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager XM and Experience Platform XP, through version 7.0 is vulnerable to an unrestricted file upload issue. A remote, authenticated attacker can upload arbitrary files to the server using crafted HTTP requests, resulting in...
CVE-2025-49447
Unrestricted Upload of File with Dangerous Type vulnerability in Fastw3b LLC FW Food Menu allows Using Malicious Files. This issue affects FW Food Menu : from n/a through 6.0.0...
CVE-2025-6266
A vulnerability was detected in Teledyne FLIR AX8 up to 1.46. Affected by this vulnerability is an unknown functionality of the file /upload.php. Performing manipulation of the argument File results in unrestricted upload. It is possible to initiate the attack remotely. The exploit is now public...
CVE-2025-6161
A vulnerability, which was classified as critical, was found in SourceCodester Simple Food Ordering System 1.0. Affected is an unknown function of the file /editproduct.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The...
PT-2025-26215
Name of the Vulnerable Software and Affected Versions FLIR AX8 versions up to 1.46 Description A critical issue affects the FLIR AX8, where the manipulation of the File argument in the "/upload.php" API endpoint leads to unrestricted file upload. This can be initiated remotely. The estimated numb...
CVE-2025-34511
Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager XM and Experience Platform XP, through version 7.0 is vulnerable to an unrestricted file upload issue. A remote, authenticated attacker can upload arbitrary files to the server using crafted HTTP requests, resulting in remot...
CVE-2025-34511
Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager XM and Experience Platform XP, through version 7.0 is vulnerable to an unrestricted file upload issue. A remote, authenticated attacker can upload arbitrary files to the server using crafted HTTP requests, resulting in remot...
CVE-2025-34511 Sitecore PowerShell Extension RCE via Unrestricted Upload
Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager XM and Experience Platform XP, through version 7.0 is vulnerable to an unrestricted file upload issue. A remote, authenticated attacker can upload arbitrary files to the server using crafted HTTP requests, resulting in remot...
EUVD-2025-18568
Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager XM and Experience Platform XP, through version 7.0 is vulnerable to an unrestricted file upload issue. A remote, authenticated attacker can upload arbitrary files to the server using crafted HTTP requests, resulting in remot...
CVE-2025-34511
CVE-2025-34511 affects Sitecore PowerShell Extensions (SPE) for Sitecore XM/XP. The vulnerability is an unrestricted file upload in SPE versions up to 7.0, allowing a remote, authenticated attacker to upload arbitrary files and achieve remote code execution. Connected exploit-related documents co...
CVE-2025-47866
An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary files on affected installations...
CVE-2025-47866
The CVE-2025-47866 vulnerability is in Trend Micro Apex Central, specifically the modTMCM widget, and affects installations running versions prior to 8.0.6955. The issue stems from insufficient validation in the modTMCM webapp widget, enabling an attacker to upload arbitrary files to affected sys...