17382 matches found
EUVD-2025-34911
An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted PDF file...
CVE-2025-56218
An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted PDF file...
CVE-2025-61514
An arbitrary file upload vulnerability in SageMath, Inc CoCalc before commit 0d2ff58 allows attackers to execute arbitrary code via uploading a crafted SVG file...
CVE-2025-56218
An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted PDF file...
Streamax Crocus 代码问题漏洞
Streamax Crocus is a system used by China Ruiming Streamax to reduce commercial vehicles to reduce traffic accidents and cargo loss. A code issue vulnerability exists in Streamax Crocus version 1.3.40, which stems from an incorrect manipulation of the parameter File in File/FileDir.do and could...
PT-2025-42632
Name of the Vulnerable Software and Affected Versions SigningHub version 8.6.8 Description An arbitrary file upload issue exists in SigningHub version 8.6.8 that could allow attackers to execute arbitrary code by uploading a specially crafted PDF file. The issue involves uploading a malicious fil...
CVE-2025-56218: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted PDF file...
CVE-2025-56218
The SigningHub electronic signature platform by Ascertia is vulnerable to an arbitrary file upload vulnerability in the File Upload Function of versions prior to v8.6.8 . Attackers can upload a crafted PDF file , which could lead to the execution of arbitrary code . Alternatively, an attacker may...
CVE-2025-56218
An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted PDF file...
EUVD-2025-34813
An arbitrary file upload vulnerability in SageMath, Inc CoCalc before commit 0d2ff58 allows attackers to execute arbitrary code via uploading a crafted SVG file...
CVE-2025-61514
An arbitrary file upload vulnerability in SageMath, Inc CoCalc before commit 0d2ff58 allows attackers to execute arbitrary code via uploading a crafted SVG file...
WordPress News Event theme <= 1.0.1 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by ? in WordPress Theme News Event versions = 1.0.1...
CVE-2025-10051
The Demo Import Kit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.1.0 via the import functionality. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload...
CVE-2025-10754
The DocoDoco Store Locator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the zip upload functionality in all versions up to, and including, 1.0.1. This makes it possible for authenticated attackers, with Editor-level access and above, to uploa...
CVE-2025-61514: Improper Neutralization of Special Elements used in a Command
An arbitrary file upload vulnerability in SageMath, Inc CoCalc before commit 0d2ff58 allows attackers to execute arbitrary code via uploading a crafted SVG file...
CVE-2025-61514
An arbitrary file upload vulnerability in SageMath, Inc CoCalc before commit 0d2ff58 allows attackers to execute arbitrary code via uploading a crafted SVG file...
PT-2025-42531
Name of the Vulnerable Software and Affected Versions SageMath CoCalc versions prior to commit 0d2ff58 Description An arbitrary file upload issue exists in SageMath CoCalc. Successful exploitation allows attackers to execute arbitrary code by uploading a specially crafted SVG file. Recommendation...
CVE-2025-61514
SageMath, Inc CoCalc (specifically the @cocalc/frontend and @cocalc/hub components) is vulnerable to an arbitrary file upload flaw in versions prior to commit 0d2ff58 . The root cause is inadequate validation of specially crafted SVG files , which allows an attacker to achieve arbitrary code exec...
