Lucene search
+L

3405 matches found

Positive Technologies
Positive Technologies
added 2023/09/24 12:00 a.m.10 views

PT-2023-5603 · D Link · D-Link Dar-8000 +1

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000 versions up to 20151231 D-Link DAR-8000 versions up to 20151231 Description: The issue is related to an unrestricted file upload vulnerability in the /sysmanage/updatelib.php file of the D-Link DAR-7000 and DAR-8000 router...

8.8CVSS6.8AI score0.32915EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2023/09/24 12:00 a.m.13 views

PT-2023-5608 · D Link · D-Link Dar-8000 +1

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000 versions up to 20151231 D-Link DAR-8000 versions up to 20151231 Description: The issue is related to an unrestricted file upload vulnerability in the /useratte/web.php file of the D-Link DAR-7000 and DAR-8000 routers. This...

8.8CVSS6.7AI score0.2283EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2023/09/24 12:00 a.m.9 views

PT-2023-5602 · D Link · D-Link Dar-8000

Name of the Vulnerable Software and Affected Versions: D-Link DAR-8000 versions up to 20151231 Description: The issue is related to an unrestricted file upload vulnerability in the /sysmanage/changelogo.php file of the D-Link DAR-8000 router's firmware. This vulnerability can be exploited remotel...

8.8CVSS6.7AI score0.15082EPSS
SaveExploits0References9
OSV
OSV
added 2023/09/20 8:15 p.m.11 views

CVE-2023-42335

Unrestricted File Upload vulnerability in Fl3xx Dispatch 2.10.37 and fl3xx Crew 2.10.37 allows a remote attacker to execute arbitrary code via the add attachment function in the New Expense component...

8.8CVSS6.1AI score0.01096EPSS
SaveExploits1References1
NVD
NVD
added 2023/09/20 8:15 p.m.19 views

CVE-2023-42335

Unrestricted File Upload vulnerability in Fl3xx Dispatch 2.10.37 and fl3xx Crew 2.10.37 allows a remote attacker to execute arbitrary code via the add attachment function in the New Expense component...

8.8CVSS8.9AI score0.01096EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/09/20 8:15 p.m.8 views

CVE-2023-42335

Unrestricted File Upload vulnerability in Fl3xx Dispatch 2.10.37 and fl3xx Crew 2.10.37 allows a remote attacker to execute arbitrary code via the add attachment function in the New Expense component...

8.8CVSS6.2AI score0.01096EPSS
SaveExploits1References2
Prion
Prion
added 2023/09/20 8:15 p.m.24 views

Unrestricted file upload

A file upload vulnerability in EliteCMS v1.01 allows a remote attacker to execute arbitrary code via the manageuploads.php component...

6.5CVSS8.9AI score0.01203EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/09/20 12:00 a.m.67 views

CVE-2023-42335

The CVE-2023-42335 entry describes an Unrestricted File Upload vulnerability in Fl3xx Dispatch 2.10.37 and Fl3xx Crew 2.10.37. The issue allows a remote attacker to execute arbitrary code via the Add Attachment function in the New Expense component. The root cause is an unrestricted file upload p...

8.8CVSS8.8AI score0.01096EPSS
SaveExploits1References1Affected Software2
Positive Technologies
Positive Technologies
added 2023/09/15 12:00 a.m.13 views

PT-2023-31404 · Unknown · Bettershop Laiketui

Name of the Vulnerable Software and Affected Versions: Bettershop LaikeTui affected versions not specified Description: A problematic issue was found in Bettershop LaikeTui, affecting the file index.php?module=system&action=uploadImg. The manipulation of the imgFile argument leads to unrestricted...

9.8CVSS6.9AI score0.005EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2023/09/11 12:43 p.m.27 views

Exploit for Unrestricted Upload of File with Dangerous Type in Mappresspro Mappress

CVE-2020-12077 MapPress Maps Pro 2.53.9 - Remote Code Exe...

8.8CVSS7.6AI score0.05606EPSS
SaveExploits3
BDU FSTEC
BDU FSTEC
added 2023/09/07 12:00 a.m.11 views

The vulnerability of the online business analytics service IBM Cognos Analytics, which stems from the lack of restrictions on file uploads, allows a perpetrator to upload arbitrary files.

The vulnerability of the online business analytics service IBM Cognos Analytics lies in the lack of restrictions on file uploads. Exploiting this vulnerability allows a malicious actor to upload any files they desire remotely...

10CVSS6.7AI score0.01666EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2023/09/05 8:15 p.m.27 views

Unrestricted file upload

File Upload vulnerability in adlered bolo-solo v.2.6 allows a remote attacker to execute arbitrary code via a crafted script to the authorization field in the header...

7.5CVSS9.4AI score0.01372EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2023/09/05 5:15 p.m.20 views

CVE-2023-3375

Unrestricted Upload of File with Dangerous Type vulnerability in Unisign Bookreen allows OS Command Injection. This issue affects Bookreen: before 3.0.0...

7.2CVSS7.1AI score0.01168EPSS
SaveExploits0References2
Prion
Prion
added 2023/09/05 5:15 p.m.28 views

Design/Logic Flaw

Unrestricted Upload of File with Dangerous Type vulnerability in Unisign Bookreen allows OS Command Injection.This issue affects Bookreen: before 3.0.0...

5.8CVSS7AI score0.01168EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/09/05 4:35 p.m.31 views

CVE-2023-3375 Unrestricted File Upload in Bookreen

Unrestricted Upload of File with Dangerous Type vulnerability in Unisign Bookreen allows OS Command Injection. This issue affects Bookreen: before 3.0.0...

7.2CVSS7.3AI score0.01168EPSS
SaveExploits0References2
Packet Storm
Packet Storm
added 2023/09/04 12:00 a.m.320 views

Humhub 1.3.13 Shell Upload

==================================================================================================================================== | Title : Humhub v1.3.13 Unrestricted File Upload Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...

7.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/08/27 12:00 a.m.11 views

PT-2023-29580 · Unknown · Bettershop Laiketui

Name of the Vulnerable Software and Affected Versions: Bettershop LaikeTui affected versions not specified Description: A critical issue has been found in Bettershop LaikeTui, affecting some unknown functionality of the file "index.php?module=api&action=user&m=upload" of the component POST Reques...

9.8CVSS7AI score0.00603EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/08/25 12:00 a.m.11 views

e-Excellence U-Office Force 代码问题漏洞

e-Excellence U-Office Force is an e-Office platform from China's First Class Technology e-Excellence. A code issue vulnerability exists in e-Excellence U-Office Force, which originates from an unrestricted upload of a dangerous type of file, and can be exploited by an unauthenticated, remote...

9.8CVSS8.9AI score0.00928EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/08/22 1:05 p.m.36 views

CVE-2023-24517 Remote Code Execution via Unrestricted File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in the Pandora FMS File Manager component, allows an attacker to make make use of this issue unrestricted file upload to execute arbitrary system commands. This issue affects Pandora FMS v767 version and prior versions on all platforms...

6.4CVSS7.5AI score0.00967EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/08/22 1:05 p.m.16 views

CVE-2023-24517 Remote Code Execution via Unrestricted File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in the Pandora FMS File Manager component, allows an attacker to make make use of this issue unrestricted file upload to execute arbitrary system commands. This issue affects Pandora FMS v767 version and prior versions on all platforms...

6.4CVSS7.6AI score0.00967EPSS
SaveExploits1References2
Rows per page
Query Builder