CVE-2025-2494 Unrestricted file upload vulnerability in Softdial Contact Center

Unrestricted file upload to Softdial Contact Center of Sytel Ltd. This vulnerability could allow an attacker to upload files to the server via the ‘/softdial/phpconsole/upload.php’ endpoint, which is protected by basic HTTP authentication. The files are uploaded to a directory exposed by the web...

CVE-2025-2494 Unrestricted file upload vulnerability in Softdial Contact Center

Unrestricted file upload to Softdial Contact Center of Sytel Ltd. This vulnerability could allow an attacker to upload files to the server via the ‘/softdial/phpconsole/upload.php’ endpoint, which is protected by basic HTTP authentication. The files are uploaded to a directory exposed by the web...

Sytel Softdial Contact Center（Sytel SCC） 代码问题漏洞

Sytel Softdial Contact Center Sytel SCC is a cloud contact center software from Sytel. A code issue vulnerability exists in Sytel Softdial Contact Center Sytel SCC, which originates from an unrestricted file upload in the /softdial/phpconsole/upload.php endpoint, which could lead to code executio...

IROAD FX2 代码问题漏洞

IROAD FX2 is a car recorder from IROAD. A code issue vulnerability exists in IROAD FX2 20250308 and prior versions, which stems from an unrestricted upload and requires an attack to be launched on the local network...

CVE-2025-2219

A vulnerability was found in LoveCards LoveCardsV2 up to 2.3.2 and classified as critical. This issue affects some unknown processing of the file /api/upload/image. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been...

CVE-2025-28915

ThemeEgg ToolKit (WordPress)

CVE-2025-2115

A vulnerability, which was classified as critical, was found in zzskzy Warehouse Refinement Management System 3.1. Affected is the function ProcessRequest of the file /AcceptZip.ashx. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack remotely...

CVE-2025-2115

CVE-2025-2115 affects zzskzy Warehouse Refinement Management System 3.1. The flaw is in ProcessRequest of the file /AcceptZip.ashx, where manipulating the argument file results in unrestricted upload. Attacks can be launched remotely, and publicly disclosed exploits exist. Multiple connected sour...

CVE-2025-2031

A vulnerability classified as critical has been found in ChestnutCMS up to 1.5.2. This affects the function uploadFile of the file /dev-api/cms/file/upload. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-2035

A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /customerregister.php. The manipulation of the argument name leads to unrestricted upload. The attack may be launched remotely. The...

CVE-2025-2035

A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /customerregister.php. The manipulation of the argument name leads to unrestricted upload. The attack may be launched remotely. The...

CVE-2025-27683

Vasion Print formerly PrinterLogic before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Driver Unrestricted Upload of File with Dangerous Type V-2022-006...

CVE-2025-27683

CVE-2025-27683 : Vasion Print (formerly PrinterLogic) prior to Virtual Appliance Host 1.0.735 Application 20.0.1330 allows a driver upload of a dangerous file type, via Unrestricted Upload of Files with Dangerous Type (V-2022-006). The vulnerability is documented across multiple sources (NVD/NVD-...

Linux Distros Unpatched Vulnerability : CVE-2018-15537

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unrestricted file upload with remote code execution in OCS Inventory NG ocsreports allows a privileged user to gain access to the server via crafted HTTP...

CVE-2025-1791

A vulnerability has been found in Zorlan SkyCaiji 2.9 and classified as critical. This vulnerability affects the function fileAction of the file vendor/skycaiji/app/admin/controller/Tool.php. The manipulation of the argument savedata leads to unrestricted upload. The attack can be initiated...

CVE-2025-1835

A vulnerability has been found in osuuu LightPicture 1.2.2 and classified as critical. This vulnerability affects the function upload of the file /app/controller/Api.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

CVE-2025-1835

CVE-2025-1835 affects osuuu LightPicture 1.2.2. The vulnerability is in the upload function of /app/controller/Api.php, where manipulation of the file argument allows unrestricted remote file upload. Multiple sources (including Red Hat, NVD, CVE listings, CIRCL) document this issue and describe i...

CVE-2025-1818

CVE-2025-1818 affects the product zj1983 zz up to 2024-8, with a vulnerability in the upload path (src/main/java/com/futvan/z/system/zfile/ZfileAction.upload) that allows unrestricted file uploads due to manipulation of the file argument. The issue can be exploited remotely; the exploit has been ...

CVE-2025-1791 Zorlan SkyCaiji Tool.php fileAction unrestricted upload

A vulnerability has been found in Zorlan SkyCaiji 2.9 and classified as critical. This vulnerability affects the function fileAction of the file vendor/skycaiji/app/admin/controller/Tool.php. The manipulation of the argument savedata leads to unrestricted upload. The attack can be initiated...

SkyCaiji 代码问题漏洞

SkyCaiji Blue Sky Collector is an open source free crawler system by zorlan individual developer. A code issue vulnerability exists in SkyCaiji version 2.9, which stems from an unrestricted file upload. An attacker can exploit the vulnerability to remotely execute code...