Lucene search
+L

3313 matches found

EUVD
EUVD
added 2025/12/18 9:31 p.m.11 views

EUVD-2025-204323

Advantech WebAccess/SCADA is vulnerable to unrestricted file upload, which may allow an attacker to remotely execute arbitrary code...

8.8CVSS7AI score0.0061EPSS
SaveExploits0References4
NVD
NVD
added 2025/12/18 9:15 p.m.14 views

CVE-2025-14849

Advantech WebAccess/SCADA is vulnerable to unrestricted file upload, which may allow an attacker to remotely execute arbitrary code...

9.8CVSS0.0061EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/12/18 8:32 p.m.5 views

CVE-2025-14849 Advantech WebAccess/SCADA Unrestricted Upload of File with Dangerous Type

Advantech WebAccess/SCADA is vulnerable to unrestricted file upload, which may allow an attacker to remotely execute arbitrary code...

8.8CVSS7.1AI score0.0061EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/18 8:32 p.m.40 views

CVE-2025-14849 Advantech WebAccess/SCADA Unrestricted Upload of File with Dangerous Type

Advantech WebAccess/SCADA is vulnerable to unrestricted file upload, which may allow an attacker to remotely execute arbitrary code...

8.8CVSS0.0061EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/18 8:32 p.m.45 views

CVE-2025-14849

CVE-2025-14849 affects Advantech WebAccess/SCADA. The vulnerability is an unrestricted file upload that could allow remote code execution. Public details in the provided documents do not specify affected versions or a patch; exploitation details are not disclosed.

9.8CVSS7.1AI score0.0061EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2025/12/18 7:53 p.m.26 views

CVE-2019-25229

CVE-2019-25229 concerns Kentico Xperience MVC Forms Unrestricted File Upload. Multiple connected sources describe an issue where authenticated users with only the 'Read data' permission can upload arbitrary file types through the MVC form file uploader components, by manipulating file names, enab...

8.8CVSS6.6AI score0.00328EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/12/18 7:53 p.m.30 views

CVE-2019-25229 Kentico Xperience <= 12.0.29 MVC Forms Unrestricted File Upload

An unrestricted file upload vulnerability in Kentico Xperience allows authenticated users with 'Read data' permissions to upload arbitrary file types via MVC form file uploader components. Attackers can manipulate file names and upload potentially malicious files to the system, enabling...

8.8CVSS0.00328EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/18 9:30 a.m.9 views

EUVD-2025-204058

Unrestricted Upload of File with Dangerous Type vulnerability in StylemixThemes Motors motors allows Using Malicious Files.This issue affects Motors: from n/a through = 5.6.81...

9.9CVSS6.5AI score0.00354EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/18 8:16 a.m.13 views

CVE-2025-66074

Unrestricted Upload of File with Dangerous Type vulnerability in Cozmoslabs WP Webhooks wp-webhooks allows Path Traversal.This issue affects WP Webhooks: from n/a through = 3.3.8...

9CVSS0.00269EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/18 8:16 a.m.10 views

CVE-2025-64374

Unrestricted Upload of File with Dangerous Type vulnerability in StylemixThemes Motors motors allows Using Malicious Files.This issue affects Motors: from n/a through = 5.6.81...

9.9CVSS0.00354EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/18 8:16 a.m.8 views

CVE-2025-64231

Unrestricted Upload of File with Dangerous Type vulnerability in RedefiningTheWeb WordPress Contact Form 7 PDF, Google Sheet & Database rtwwcfp-wordpress-contact-form-7-pdf allows Using Malicious Files.This issue affects WordPress Contact Form 7 PDF, Google Sheet & Database: from n/a through =...

9.9CVSS0.00312EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/18 7:22 a.m.10 views

EUVD-2025-204071

Unrestricted Upload of File with Dangerous Type vulnerability in RedefiningTheWeb WordPress Contact Form 7 PDF, Google Sheet & Database rtwwcfp-wordpress-contact-form-7-pdf allows Using Malicious Files.This issue affects WordPress Contact Form 7 PDF, Google Sheet & Database: from n/a through =...

9.8CVSS6.4AI score0.00312EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/18 12:00 a.m.16 views

PT-2025-52335

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA affected versions not specified Description Advantech WebAccess/SCADA is susceptible to a file upload issue that does not have restrictions. This could allow a remote attacker to execute code. The issue may allow for...

8.8CVSS7.3AI score0.0061EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/12/18 12:00 a.m.14 views

PT-2025-52195

Unrestricted Upload of File with Dangerous Type vulnerability in Cozmoslabs WP Webhooks wp-webhooks allows Path Traversal.This issue affects WP Webhooks: from n/a through = 3.3.8...

7AI score0.00269EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/18 12:00 a.m.15 views

PT-2025-52295

An unrestricted file upload vulnerability in Kentico Xperience allows authenticated users with 'Read data' permissions to upload arbitrary file types via MVC form file uploader components. Attackers can manipulate file names and upload potentially malicious files to the system, enabling...

8.8CVSS7AI score0.00328EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/18 12:00 a.m.8 views

Advantech WebAccess/SCADA 代码问题漏洞

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. A code issue vulnerability exists in Advantech...

9.8CVSS6.2AI score0.0061EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/18 12:00 a.m.9 views

SourceCodester Client Database Management System 安全漏洞

SourceCodester Client Database Management System is a SourceCodester open source client database management system. A security vulnerability exists in SourceCodester Client Database Management System version 1.0, which originates from an unrestricted upload of the file /userleads.php...

8.8CVSS6.6AI score0.0034EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/12/17 10:44 p.m.27 views

CVE-2023-53921 SitemagicCMS 4.4.3 Remote Code Execution via Unrestricted File Upload

SitemagicCMS 4.4.3 contains a remote code execution vulnerability that allows attackers to upload malicious PHP files to the files/images directory. Attackers can upload a .phar file with system command execution payload to compromise the web application and execute arbitrary system commands...

9.8CVSS0.00937EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/12/17 10:44 p.m.6 views

CVE-2023-53921 SitemagicCMS 4.4.3 Remote Code Execution via Unrestricted File Upload

SitemagicCMS 4.4.3 contains a remote code execution vulnerability that allows attackers to upload malicious PHP files to the files/images directory. Attackers can upload a .phar file with system command execution payload to compromise the web application and execute arbitrary system commands...

9.8CVSS8.3AI score0.00937EPSS
SaveExploits1References3
CVE
CVE
added 2025/12/17 10:44 p.m.19 views

CVE-2023-53921

SitemagicCMS 4.4.3 is affected by a remote code execution vulnerability via unrestricted file upload. The issue allows uploading a .phar file containing a system command execution payload into the files/images directory, enabling attackers to execute arbitrary commands on the hosting system. Docu...

9.8CVSS8.3AI score0.00937EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder