CVE-2025-12399: Unrestricted Upload of File with Dangerous Type

The Alex Reservations: Smart Restaurant Booking plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the /wp-json/srr/v1/app/upload/file REST endpoint in all versions up to, and including, 2.2.3. This makes it possible for authenticated attackers, wi...

CVE-2022-41870

AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app upload...

CVE-2022-41870

AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app upload...

CVE-2022-41870

AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app upload...

Command injection

AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app upload...

CVE-2022-41870

Affected software: Innovaphone AP Manager (pre-13r2 Service Release 17). Vulnerability: Command injection via a modified service ID during app upload, enabling an attacker to inject commands with high impact likely affecting confidentiality, integrity, and availability as indicated by CVSS v3.1 m...

CVE-2022-41870

AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app upload...

CVE-2022-41870: Improper Neutralization of Special Elements used in a Command

AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app upload...

Uploading Enterprise App (Private App) to Google Play Store via Cloud Endpoint Management Fails - Error "Upload a new APK file with a different package name"

Uploading an APK file to Managed Google Play Store as instructed in Citrix Documentationyou receive the following error message: "Upload a new APK file with a different package name "...

CVE-2020-27485

Garmin Forerunner 235 before 8.20 is affected by: Array index error. The component is: ConnectIQ TVM. The attack vector is: To exploit the vulnerability, the attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The ConnectIQ program interpreter fails to check the index...

iOS Public App Store app uploads are not working when using the App Store app URL

With Endpoint Management, when an Administrator attempts to upload an iOS and/or iPadOS public App Store app by enteringthe URL by using the new app URL on the App Store, the app is not found and the error below is displayed...

XenMobile 10.8 fixed issues

XenMobile 10.8 includes the following fixed issues. For fixed issues related to XenMobile Apps, seeFixed issues. When you upload an .ipa enterprise app to XenMobile Server, occasionally the upload fails. The following error message appears: Uploaded mobile app is invalid. Application icon was not...