149 matches found
VulnCheck KEV: CVE-2023-50386
Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected...
za-internet C-MOR Video Surveillance 安全漏洞
za-internet C-MOR Video Surveillance is a network video surveillance system from the German company za-internet. A security vulnerability exists in za-internet C-MOR Video Surveillance version 5.2401, which stems from improper input validation and results in unrestricted file uploads...
SourceCodester Zipped Folder Manager App 代码问题漏洞
SourceCodester Zipped Folder Manager App is an open source zipped folder manager application from SourceCodester. A code issue vulnerability exists in version 1.0 of the SourceCodester Zipped Folder Manager App that stems from improper handling of the parameter folder, resulting in unrestricted...
CVE-2024-40705
CVE-2024-40705 : IBM InfoSphere Information Server (InfoSphere Information Governance Catalog) contains an unrestricted file upload vulnerability that could allow an authenticated user to exhaust file space resources. The primary impact is resource depletion (availability impact). Affected produc...
itsourcecode Laravel Accounting System 代码问题漏洞
itsourcecode Laravel Accounting System is an accounting system from itsourcecode, Inc. A code issue vulnerability exists in version 1.0 of itsourcecode Laravel Accounting System, which stems from an incorrect manipulation of the parameter image that can lead to unrestricted file uploads...
Simple Online Hotel Reservation System Code Issue Vulnerability
Simple Online Hotel Reservation System is an online hotel reservation system. A code issue exists in version 1.0 of the Simple Online Hotel Reservation System where an incorrect manipulation of the parameter photo can result in unrestricted file uploads...
WordPress plugin ActiveDEMAND 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A code issue...
PT-2024-23995 · Unknown · Copymatic – Ai Content Writer & Generator
Name of the Vulnerable Software and Affected Versions: Copymatic – AI Content Writer & Generator versions 1.6 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the Copymatic – AI Content Writer & Generator. This allows for the uploa...
WordPress plugin XStore Core 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...
PandaX Code Issues Vulnerabilities
PandaX is a Go language open source low-code development framework for enterprise IoT platforms from PandaX Open Source. A code issue vulnerability exists in PandaX version 20240310 and prior versions, which stems from an incorrect manipulation of the parameter file can lead to unrestricted file...
WordPress Plugin Icons Font Loader Code Issue Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...
openBI Code Issues Vulnerabilities
openBI is a big data visualization solution from openBI. A code issue vulnerability exists in openBI prior to version 1.0.8, which stems from a problem in the index function of the /application/plugins/controller/Upload.php file, which could lead to unrestricted file uploads...
pyload Security Vulnerabilities
pyload is a free and open source download manager written in Python, designed to be extremely lightweight, easily extensible and fully manageable over the Web. A security vulnerability exists in pyLoad version 0.5.0 that stems from vulnerability to unrestricted file uploads...
Lightxun IPTV Gateway Code Issue Vulnerability
Lightxun IPTV Gateway is a gateway product from China Lightxun Technology Lightxun. A code issue vulnerability exists in Lightxun IPTV Gateway, which originates from some unknown processing in /ZHGXTV/index.php/admin/index/webuploadtemplate.html, which leads to unrestricted uploads via the...
Xiamen Four-Faith Communication Technology Video Surveillance Management System Code Issue Vulnerability
Xiamen Four-Faith Communication Technology Video Surveillance Management System is a video surveillance management system developed by Xiamen Four-Faith Communication Technology Xiamen, China. Xiamen Four-Faith Communication Technology is a video surveillance management system. A code issue...
Headwind MDM Cross-Site Scripting Vulnerability
Headwind MDM is a platform for managing Android devices in an organization. A cross-site scripting vulnerability exists in Headwind MDM Web panel version 5.22.1, which stems from unrestricted file uploads...
Multiple vulnerabilities in EXPRESSCLUSTER X
Overview WebManager/Cluster WebUI of EXPRESSCLUSTER X provided by NEC Corporation contains multiple vulnerabilities listed below. Missing authorization CWE-862 - CVE-2023-39544 Files or directories accessible to external parties CWE-552 - CVE-2023-39545 Use of password hash instead of password fo...
The vulnerability of the WPanel CMS system, related to the lack of restrictions on file uploads, allows a hacker to execute arbitrary code.
The vulnerability of the WPanel CMS system is related to the lack of restrictions on the download of files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by downloading arbitrary PHP files remotely...
PT-2023-7871 · Nagios Xi · Nagios Xi
Name of the Vulnerable Software and Affected Versions: Nagios XI affected versions not specified Description: The issue is related to the Custom Includes module of Nagios XI, which is vulnerable to unrestricted file upload of dangerous types. This could allow a remote attacker to execute arbitrar...
