CVE-2025-39557 WordPress Kadence WooCommerce Email Designer plugin <= 1.5.14 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in StellarWP Kadence WooCommerce Email Designer kadence-woocommerce-email-designer allows Upload a Web Shell to a Web Server.This issue affects Kadence WooCommerce Email Designer: from n/a through = 1.5.14...

CVE-2024-40071

The Sourcecodester Online ID Generator System version 1.0 is vulnerable to an arbitrary file upload vulnerability via the id_generator/classes/SystemSettings.php?f=update_settings endpoint. This flaw allows an attacker to upload a crafted PHP file , leading to arbitrary code execution . As no pat...

Sourcecodester Online ID Generator System Security Vulnerabilities

SourceCodester Online ID Generator System is an online identity generator system from SourceCodester open source. A security vulnerability exists in version 1.0 of the Sourcecodester Online ID Generator System, which stems from allowing the upload of arbitrary files and could lead to the executio...

CVE-2024-40070

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2024-40070

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2024-40071

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/SystemSettings.php?f=updatesettings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2024-40071

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/SystemSettings.php?f=updatesettings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2024-40070

Sourcecodester Online ID Generator System 1.0 contains an arbitrary file upload vulnerability within the id_generator/classes/Users.php?f=save endpoint. An attacker can exploit this flaw by uploading a crafted PHP file to achieve arbitrary code execution . To mitigate this risk, it is recommended...

CVE-2024-40071: Unrestricted Upload of File with Dangerous Type

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/SystemSettings.php?f=updatesettings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2024-40070: Improper Neutralization of Special Elements used in a Command

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

Car Rental Project 1.0 - Remote Code Execution

Exploit Title: Car Rental Project 1.0 - Remote Code Execution Date: 1/3/2020 Exploit Author: FULLSHADE, SC Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/car-rental-project-php-mysql-free-download/ Version: 1.0 Tested on: Windows CVE : CVE-2020-5509...

CVE-2025-30510

An attacker can upload an arbitrary file instead of a plant image...

CVE-2025-30510

An attacker can upload an arbitrary file instead of a plant image...

CVE-2025-26927 WordPress AI Hub plugin <= 1.3.7 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in LiquidThemes AI Hub aihub allows Upload a Web Shell to a Web Server.This issue affects AI Hub: from n/a through = 1.3.7...

CVE-2025-30510 Growatt Cloud portal Insufficient Type Distinction

An attacker can upload an arbitrary file instead of a plant image...

CVE-2025-30510

Growatt Cloud Applications (version 3.6.0 and earlier) is affected by a vulnerability where an attacker can upload an arbitrary file in place of a plant image. Public sources note this in multiple records (CNNVD, RH/Red Hat CVE, NVD). Some documents also describe related issues involving improper...

WordPress MapSVG Lite plugin <= 8.6.4 - Arbitrary File Upload Vulnerability

Arbitrary File Upload Vulnerability discovered by Anhchangmutrang in WordPress Plugin MapSVG versions = 8.6.4...

CVE-2025-29281

In PerfreeBlog version 4.0.11, regular users can exploit the arbitrary file upload vulnerability in the attach component to upload arbitrary files and execute code within them...

Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data has addressed security vulnerabilities

Summary There are vulnerabilities in IBM® Java™ Version 8 used by IBM Cognos Dashboards on Cloud Pak. IBM Cognos Dashboards on Cloud Pak has addressed these vulnerabilities by upgrading IBM® Java™. There are vulnerabilities in Open-Source Software OSS components consumed by IBM Cognos Dashboards ...

PT-2025-16342 · Unknown · Perfreeblog

Name of the Vulnerable Software and Affected Versions: PerfreeBlog version 4.0.11 Description: The issue allows regular users to exploit an arbitrary file upload vulnerability in the attach component, enabling them to upload arbitrary files and execute code within them. Recommendations: For...