PT-2025-35808

Name of the Vulnerable Software and Affected Versions Cisco Evolved Programmable Network Manager EPNM affected versions not specified Description A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager EPNM may allow an authenticated, remote attacker to...

CVE-2025-57148

phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/insert-product.php, due to the lack of extension validation...

CVE-2025-57148

The phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload within the /admin/insert-product.php component. The root cause is a lack of extension validation , which allows an attacker to upload potentially malicious files. Exploitation can lead to unauthorized file placement ...

CVE-2025-57148

phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/insert-product.php, due to the lack of extension validation...

CVE-2025-57148: Unrestricted Upload of File with Dangerous Type

phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/insert-product.php, due to the lack of extension validation...

CVE-2025-55372

An arbitrary file upload vulnerability in Beakon Application before v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2025-55372

An arbitrary file upload vulnerability in Beakon Application before v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2025-55372: Improper Neutralization of Special Elements used in a Command

An arbitrary file upload vulnerability in Beakon Application before v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2025-55372

An arbitrary file upload vulnerability in Beakon Application before v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file...

PT-2025-35574

Name of the Vulnerable Software and Affected Versions: Beakon Application versions prior to 5.4.3 Description: An arbitrary file upload vulnerability exists in Beakon Application. This vulnerability allows attackers to execute arbitrary code by uploading a crafted file. Recommendations: Update...

CVE-2025-55372

An arbitrary file upload vulnerability in Beakon Application before v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file...

Beakon Application 安全漏洞

Beakon Application is a software from Beakon Australia with features for managing workplace security, risk and compliance. A security vulnerability exists in Beakon Application versions prior to 5.4.3 that originates from an arbitrary file upload and could lead to the execution of arbitrary code...

CVE-2025-55372

The Beakon Application (a workplace security, risk, and compliance management software from Beakon Australia) is vulnerable to an arbitrary file upload vulnerability in versions prior to v5.4.3 . This flaw allows an attacker to upload a crafted file to execute arbitrary code on the system. The vu...

WordPress Clanora theme < 1.3.1 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Clanora versions 1.3.1...

Sim Studio 安全漏洞

Sim Studio is an AI agent workflow builder from Sim Studio Open Source. A security vulnerability exists in Sim Studio that stems from an arbitrary file upload due to incorrect manipulation of the parameter File in the file apps/sim/app/api/files/upload/route.ts...

tianti 安全漏洞

tianti tianti is a JAVA lightweight CMS solution by jeffry individual developer. A security vulnerability exists in tianti 2.3 and earlier versions, which originates from a misuse of the parameter upfile in the file src/main/java/com/jeff/tianti/controller/UploadController.java resulting in an...

CVE-2025-31100

CVE-2025-31100 relates to an unrestricted file upload vulnerability in the WordPress/“Mojoomla” School Management plugin. The issue allows uploading a Web Shell to the web server and affects versions n/a through 1.93.1 (02-07-2025). The root cause is an unrestricted upload of dangerous file types...

CVE-2025-31100 WordPress School Management Plugin <= 1.93.1 (02-07-2025) - Arbitrary File Upload Vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Mojoomla School Management allows Upload a Web Shell to a Web Server.This issue affects School Management: from n/a through 1.93.1 02-07-2025...

CVE-2023-7309

A path traversal vulnerability exists in the Dahua Smart Park Integrated Management Platform also referred to as the Dahua Smart Campus Integrated Management Platform, affecting the SOAP-based GIS bitmap upload interface. The flaw allows unauthenticated remote attackers to upload arbitrary files ...

CVE-2025-34163

Dongsheng Logistics Software exposes an unauthenticated endpoint at /CommMng/Print/UploadMailFile that fails to enforce proper file type validation and access control. An attacker can upload arbitrary files, including executable scripts such as .ashx, via a crafted multipart/form-data POST reques...