EUVD-2013-1939

Malware in sbrugna...

EUVD-2006-5002

Malware in sbrugna...

EUVD-2014-2219

Malware in sbrugna...

EUVD-2021-1437

Malware in sbrugna...

EUVD-2015-9397

Malware in sbrugna...

EUVD-2012-1179

Malware in sbrugna...

EUVD-2007-0884

Malware in sbrugna...

EUVD-2018-13531

Malware in sbrugna...

EUVD-2018-10858

Malware in sbrugna...

EUVD-2017-8258

Malware in sbrugna...

EUVD-2018-13179

Malware in sbrugna...

EUVD-2017-18215

Malware in sbrugna...

EUVD-2017-17043

Malware in sbrugna...

Fixed in Apache Tomcat 10.1.47

Low: Delayed cleaning of multipart upload temporary files may lead to DoS CVE-2025-61795 If an error occurred including exceeding limits during the processing of a multipart upload, temporary copies of the uploaded parts written to local storage were not cleaned up immediately but left for the...

Code-Projects Student Crud Operation 代码问题漏洞

Code-Projects Student Crud Operation is a Code-Projects open source student information system. A code issue vulnerability exists in Code-Projects Student Crud Operation version 3.3 and earlier, which stems from improper manipulation of the moveuploadedfile function in the file add.php, which can...

SourceCodester Hotel and Lodge Management System 代码问题漏洞

SourceCodester Hotel and Lodge Management System is a SourceCodester open source hotel and lodge management system. A code issue vulnerability exists in version 1.0 of the SourceCodester Hotel and Lodge Management System, which stems from an incorrect manipulation of the parameter image in the fi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: tomcat (UTSA-2025-986094)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986094 advisory. For some unlikely configurations of multipart upload, an Integer Overflow vulnerability in Apache Tomcat could lead to a DoS via bypassing of size limits. This issue...

CVE-2025-59835

LangBot is a global IM bot platform designed for LLMs. In versions 4.1.0 up to but not including 4.3.5, authorized attackers can exploit the /api/v1/files/documents interface to perform arbitrary file uploads. Since this interface does not strictly restrict the storage directory of files on the...

CVE-2025-11221

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal', Unrestricted Upload of File with Dangerous Type vulnerability in GTONE ChangeFlow allows Path Traversal, Accessing Functionality Not Properly Constrained by ACLs.This issue affects ChangeFlow: from All versions through...

CVE-2025-61769 Emlog vulnerable to stored XSS in file upload functionality in emlog

Emlog is an open source website building system. A cross-site scripting XSS vulnerability in emlog up to and including version 2.5.22 allows authenticated remote attackers to inject arbitrary web script or HTML via the file upload functionality. As an authenticated user it is possible to upload...