55 matches found
EUVD-2025-208329
An issue in Aranda Service Desk Web Edition ASDK API 8.6 allows authenticated attackers to achieve remote code execution due to improper validation of uploaded files. An authenticated user can upload a crafted web.config file by sending a crafted POST request to /ASDKAPI/api/v8.6/item/addfile,...
CVE-2025-70995
An issue in Aranda Service Desk Web Edition ASDK API 8.6 allows authenticated attackers to achieve remote code execution due to improper validation of uploaded files. An authenticated user can upload a crafted web.config file by sending a crafted POST request to /ASDKAPI/api/v8.6/item/addfile,...
CVE-2025-70995
An issue in Aranda Service Desk Web Edition ASDK API 8.6 allows authenticated attackers to achieve remote code execution due to improper validation of uploaded files. An authenticated user can upload a crafted web.config file by sending a crafted POST request to /ASDKAPI/api/v8.6/item/addfile,...
CVE-2025-70995: Improper Control of Generation of Code
An issue in Aranda Service Desk Web Edition ASDK API 8.6 allows authenticated attackers to achieve remote code execution due to improper validation of uploaded files. An authenticated user can upload a crafted web.config file by sending a crafted POST request to /ASDKAPI/api/v8.6/item/addfile,...
Aranda Service Desk Web Edition 安全漏洞
Aranda Service Desk Web Edition is a process management support system developed by the American company Aranda. There is a security vulnerability in Aranda Service Desk Web Edition, which stems from improper validation of uploaded files, potentially allowing remote code execution...
EUVD-2019-7529
Malware in sbrugna...
CVE-2023-25260
Stimulsoft Designer Web 2023.1.3 is vulnerable to Local File Inclusion...
Buffer Overflow Vulnerability in Nanjing Xindi Ecoshen Windows Network Web Edition (CNVD-2020-62383)
Nanjing New Dixon Software Technology Co., Ltd. is a high-tech enterprise specializing in the research, development and sales of industrial control general configuration and embedded software. Nanjing Xindishen Windows Network Web Edition suffers from a buffer overflow vulnerability, which can be...
Nanjing Xindi EcoGod Windows Network Web Edition suffers from an out-of-bounds access vulnerability
Nanjing New Dixon Software Technology Co., Ltd. is a high-tech enterprise specializing in the research, development and sales of industrial control general configuration and embedded software. Nanjing Xindishen Windows Network Web Edition has an out-of-bounds access vulnerability that can be...
Nanjing Xindi EcoGod Windows Network Web Edition suffers from information leakage vulnerability
Nanjing New Dixon Software Technology Co., Ltd. is a high-tech enterprise specializing in the research, development and sales of industrial control general configuration and embedded software. Nanjing Xindishen Windows Network Web Edition has an information leakage vulnerability that can be...
Footy Tipping Software AFL Web Edition Code Issue Vulnerability
Footy Tipping Software AFL Web Edition is a web-based soccer competition software program. A code issue vulnerability exists in Footy Tipping Software AFL Web Edition version 2019, which can be exploited by an attacker to bypass whitelisting, upload arbitrary files and execute code by uploading a...
CVE-2019-17057
Footy Tipping Software AFL Web Edition 2019 allows XSS...
CVE-2019-17057
Footy Tipping Software AFL Web Edition 2019 allows XSS...
Cross site scripting
Footy Tipping Software AFL Web Edition 2019 allows XSS...
CVE-2019-17058
Footy Tipping Software AFL Web Edition 2019 contains a vulnerability where an Administrator can bypass a whitelist and upload a crafted upload.dat file, enabling arbitrary file upload and remote code execution. The issue affects the web edition of the Footy Tipping Software AFL 2019; exploitation...
CVE-2019-17058
Footy Tipping Software AFL Web Edition 2019 allows arbitrary file upload and resultant remote code execution because a whitelist can be bypassed by an Administrator who uploads a crafted upload.dat file...
CVE-2019-17057
Footy Tipping Software AFL Web Edition 2019 allows XSS...
CVE-2019-17057
Footy Tipping Software AFL Web Edition 2019 is affected by a Cross‑Site Scripting (XSS) vulnerability. Multiple sources (CNVD-2019-42565, NVD CVE-2019-17057) describe a web edition vulnerability in 2019 that enables attacker‑supplied input to trigger client‑side code execution. CNVD explicitly st...
CVE-2019-17058: Unrestricted Upload of File with Dangerous Type
Footy Tipping Software AFL Web Edition 2019 allows arbitrary file upload and resultant remote code execution because a whitelist can be bypassed by an Administrator who uploads a crafted upload.dat file...