1469 matches found
CVE-2025-53283
The CVE-2025-53283 entry concerns the WordPress plugin Drop Uploader for CF7 - Drag&Drop File Uploader Addon (versions up to and including 2.4.1). The vulnerability is described as Unrestricted Upload of File with Dangerous Type, allowing an attacker to upload a Web Shell to the web server. Multi...
EUVD-2025-37997
Unrestricted Upload of File with Dangerous Type vulnerability in borisolhor Drop Uploader for CF7 - Drag&Drop File Uploader Addon drop-uploader-for-contact-form-7-dragdrop-file-uploader-addon allows Upload a Web Shell to a Web Server.This issue affects Drop Uploader for CF7 - Drag&Drop File...
CVE-2025-3125
An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper input validation in the CarbonAppUploader admin service endpoint. An authenticated attacker with appropriate privileges can upload a malicious file to a user-controlled location on the server, potentially...
WordPress plugin Drop Uploader for CF7 - Drag&Drop File Uploader Addon 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... WordPress...
PT-2025-45224
Unrestricted Upload of File with Dangerous Type vulnerability in borisolhor Drop Uploader for CF7 - Drag File Uploader Addon drop-uploader-for-contact-form-7-dragdrop-file-uploader-addon allows Upload a Web Shell to a Web Server.This issue affects Drop Uploader for CF7 - Drag File Uploader Addon:...
CVE-2025-3125
An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper input validation in the CarbonAppUploader admin service endpoint. An authenticated attacker with appropriate privileges can upload a malicious file to a user-controlled location on the server, potentially...
CVE-2025-3125 Authenticated Arbitrary File Upload in Multiple WSO2 Products via CarbonAppUploader Admin Service Leading to Remote Code Execution
An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper input validation in the CarbonAppUploader admin service endpoint. An authenticated attacker with appropriate privileges can upload a malicious file to a user-controlled location on the server, potentially...
WSO2多款产品 安全漏洞
WSO2 API Manager and other products are products of WSO2 Corporation, USA.WSO2 API Manager is an API lifecycle management solution.WSO2 Identity Server IS is an identity server.WSO2 API Control Plane is a control panel. A security vulnerability exists in several WSO2 products that stems from...
MAL-2025-49118 Malicious code in epic-asset-uploader-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 168bca602c07dee020253d5302f18b0f0f5fb783801ac20450da5073f282042b The package epic-asset-uploader-ui was found to contain malicious code...
Malicious code in epic-asset-uploader-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 168bca602c07dee020253d5302f18b0f0f5fb783801ac20450da5073f282042b The package epic-asset-uploader-ui was found to contain malicious code...
EUVD-2025-37175
Malicious code in epic-asset-uploader-ui npm...
EUVD-2008-2199
Malware in sbrugna...
EUVD-2021-21273
Malware in sbrugna...
EUVD-2014-1078
Malware in sbrugna...
EUVD-2009-2176
Malware in sbrugna...
EUVD-2007-0127
Malware in sbrugna...
EUVD-2015-9403
Malware in sbrugna...
EUVD-2007-4310
Malware in sbrugna...