Lucene search
+L

14 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 9:29 a.m.•18 views

CVE-2023-50873

Cross-Site Request Forgery CSRF vulnerability in Marios Alexandrou Add Any Extension to Pages.This issue affects Add Any Extension to Pages: from n/a through 1.4...

8.8CVSS8.5AI score0.00227EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2023-55606

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.00227EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/21 3:15 p.m.•9 views

CVE-2025-55383

Moss before v0.15 has a file upload vulnerability. The "upload" function configuration allows attackers to upload files of any extension to any location on the target server...

8.6CVSS5.8AI score0.00284EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/21 12:00 a.m.•4 views

CVE-2025-55383

Moss before v0.15 has a file upload vulnerability. The "upload" function configuration allows attackers to upload files of any extension to any location on the target server...

7.1AI score0.00284EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/13 5:37 p.m.•16 views

DRUPAL-CONTRIB-2024-060

The module creates an endpoint on the site at /postfile/upload that accepts a POST request for uploading a single file into a specified file system public, private, etc. This module accepts any uploaded file extension, including dangerous file formats so it can be used to bypass the...

6.7AI score0.00231EPSS
SaveExploits0References1
NVD
NVD
•added 2023/12/28 11:15 a.m.•27 views

CVE-2023-50873

Cross-Site Request Forgery CSRF vulnerability in Marios Alexandrou Add Any Extension to Pages.This issue affects Add Any Extension to Pages: from n/a through 1.4...

8.8CVSS0.00227EPSS
SaveExploits0References1
OSV
OSV
•added 2023/12/28 11:15 a.m.•13 views

CVE-2023-50873

Cross-Site Request Forgery CSRF vulnerability in Marios Alexandrou Add Any Extension to Pages.This issue affects Add Any Extension to Pages: from n/a through 1.4...

8.8CVSS7.3AI score0.00227EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/28 11:15 a.m.•20 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Marios Alexandrou Add Any Extension to Pages.This issue affects Add Any Extension to Pages: from n/a through 1.4...

6.8CVSS7.1AI score0.00227EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/12/28 10:28 a.m.•56 views

CVE-2023-50873

Technical details about CVE-2023-50873 (Add Any Extension to Pages) are not provided in the connected documents. Public details such as affected versions, root cause, exploitation, or fixes are not present in the supplied materials. Monitor for updates.

8.8CVSS8.5AI score0.00227EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/28 12:00 a.m.•1 views

CVE-2023-50873: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Marios Alexandrou Add Any Extension to Pages.This issue affects Add Any Extension to Pages: from n/a through 1.4...

8.8CVSS7.8AI score0.00227EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/08/23 12:00 a.m.•23 views

The vulnerability of the Google Chrome browser’s Extensions API allows a hacker to install any extension they desire.

The vulnerability of the Google Chrome browser’s Extensions API relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to install any extension using a specially created HTML page...

10CVSS7.6AI score0.00669EPSS
SaveExploits0References8Affected Software6
BDU FSTEC
BDU FSTEC
•added 2023/08/23 12:00 a.m.•12 views

The vulnerability of the Google Chrome browser’s Extensions API allows a hacker to install any extension they desire.

The vulnerability of the Google Chrome browser’s Extensions API is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to install any extension through a specially created HTML page...

7.8CVSS6.5AI score0.0064EPSS
SaveExploits0References9Affected Software6
attackerkb
attackerkb
•added 2021/09/14 12:15 p.m.•9 views

CVE-2021-36581

Kooboo CMS 2.1.1.0 is vulnerable to Insecure file upload. It is possible to upload any file extension to the server. The server does not verify the extension of the file and the tester was able to upload an aspx to the server...

9.8CVSS7.2AI score0.0143EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/13 12:00 a.m.•1 views

CVE-2018-1000094: Unrestricted Upload of File with Dangerous Type

CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server. This attack appear to be exploitable via File upload - copy to any extension...

7.2CVSS7.3AI score0.38802EPSS
SaveExploits8References2
Rows per page
Query Builder