17384 matches found
PT-2025-41588
Name of the Vulnerable Software and Affected Versions MCMS version 6.0.1 Description An arbitrary file upload issue exists in MCMS version 6.0.1, potentially allowing attackers to execute code by uploading a specially crafted file. Recommendations At the moment, there is no information about a...
CVE-2025-60838: Improper Neutralization of Special Elements used in a Command
An arbitrary file upload vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2025-35055
Newforma Info Exchange NIX '/UserWeb/Common/UploadBlueimp.ashx' allows an authenticated attacker to upload an arbitrary file to any location writable by the NIX application. An attacker can upload and run a web shell or other content executable by the web server. An attacker can also delete...
CVE-2025-35055
Newforma Info Exchange NIX '/UserWeb/Common/UploadBlueimp.ashx' allows an authenticated attacker to upload an arbitrary file to any location writable by the NIX application. An attacker can upload and run a web shell or other content executable by the web server. An attacker can also delete...
CVE-2025-35055 Newforma Info Exchange (NIX) insecure file upload
Newforma Info Exchange NIX '/UserWeb/Common/UploadBlueimp.ashx' allows an authenticated attacker to upload an arbitrary file to any location writable by the NIX application. An attacker can upload and run a web shell or other content executable by the web server. An attacker can also delete...
CVE-2025-35055 Newforma Info Exchange (NIX) insecure file upload
Newforma Info Exchange NIX '/UserWeb/Common/UploadBlueimp.ashx' allows an authenticated attacker to upload an arbitrary file to any location writable by the NIX application. An attacker can upload and run a web shell or other content executable by the web server. An attacker can also delete...
CVE-2025-35055: Improper Limitation of a Pathname to a Restricted Directory
Newforma Info Exchange NIX '/UserWeb/Common/UploadBlueimp.ashx' allows an authenticated attacker to upload an arbitrary file to any location writable by the NIX application. An attacker can upload and run a web shell or other content executable by the web server. An attacker can also delete...
Arbitrary File Upload
Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Arbitrary File Upload via the file upload process. An attacker can store malicious files on the server by uploading files without proper validation of file type, extension, or content. This can result in th...
Arbitrary File Upload
Overview flowise-ui is a Affected versions of this package are vulnerable to Arbitrary File Upload via the file upload process. An attacker can store malicious files on the server by uploading files without proper validation of file type, extension, or content. This can result in the persistent...
Arbitrary File Upload
com.vaadin:vaadin-server is vulnerable to an Arbitrary File Upload. The vulnerability is due to insufficient validation of metadata in the start listener of incoming uploads, which allows an attacker to bypass upload validation and potentially upload unauthorized or malicious files...
Library Management System 代码问题漏洞
Library Management System is a library management system with QR code for attendance and automatic generation of library cards by King Albaracin Individual Developer. A code issue vulnerability exists in Library Management System version 1.0, which stems from an incorrect manipulation of the...
Exploit for CVE-2025-7441
CVE-2025-7441 StoryChief = 1.0.42 - Unauthenticated Arbitr...
EUVD-2020-14924
Malware in sbrugna...
EUVD-2016-1986
Malware in sbrugna...
EUVD-2016-1988
Malware in sbrugna...
EUVD-2016-1950
Malware in sbrugna...
EUVD-2017-6327
Malware in sbrugna...
EUVD-2017-6329
Malware in sbrugna...