15 matches found
PT-2025-53330
Name of the Vulnerable Software and Affected Versions Legrand BTicino Driver Manager F454 version 1.0.51 Description The software contains web vulnerabilities that permit attackers to carry out administrative tasks without sufficient request validation. An attacker can leverage cross-site request...
EUVD-2025-25703
Malicious code in bioql PyPI...
CVE-2025-55455
DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via the component /msg/sendtext...
CVE-2025-55454
An authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask v1.0.51 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2025-55455
DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via the component /msg/sendtext...
CVE-2025-55455
DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via the component /msg/sendtext...
PT-2025-34488 · Dootask · Dootask
Name of the Vulnerable Software and Affected Versions: DooTask version 1.0.51 Description: An authenticated arbitrary file upload issue exists in the /msg/sendfiles component of DooTask version 1.0.51. This allows attackers to execute arbitrary code by uploading a crafted file. Recommendations: A...
dootask 安全漏洞
dootask is an open source online project task management tool from dootask, Inc. A security vulnerability exists in dootask version 1.0.51, which stems from an authentication arbitrary download issue in the /msg/sendtext component...
CVE-2025-55454
An authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask v1.0.51 allows attackers to execute arbitrary code via uploading a crafted file...
PT-2025-34498 · Dootask · Dootask
Name of the Vulnerable Software and Affected Versions: DooTask version 1.0.51 Description: DooTask version 1.0.51 contains an authenticated arbitrary download vulnerability within the /msg/sendtext component. Recommendations: At the moment, there is no information about a newer version that...
CVE-2025-55454
An authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask v1.0.51 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2025-55454
CVE-2025-55454 affects DooTask v1.0.51. An authenticated arbitrary file upload weakness in the /msg/sendfiles component allows code execution via a crafted file. Root cause: improper handling of uploaded files enabling execution of attacker-controlled content. Impact: potential remote code execut...
PrestaShop Security Breach
PrestaShop is an open source e-commerce solution from the American company PrestaShop. The solution offers multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop askforaquotemodul version 1.0.51 and prior versions, which stems from...
Dell EMC Avamar ADMe Local File Inclusion Vulnerability
Dell EMC Avamar is a suite of fully virtualized backup and recovery software for servers. A local file inclusion vulnerability exists in the Web Interface in Dell EMC Avamar ADMe versions 1.0.50 and 1.0.51. An attacker could exploit this vulnerability by sending a specially crafted request to...
BD PerformA and KLA Journal Service Information Disclosure Vulnerability
BD PerformA and KLA Journal Service are both BD products for healthcare applications. The former is a set of applications for system monitoring; the latter is a set of applications for incremental backup. A security vulnerability exists in BD PerformA version 2.0.14.0 and earlier and KLA Journal...