17463 matches found
CVE-2025-29281
In PerfreeBlog version 4.0.11, regular users can exploit the arbitrary file upload vulnerability in the attach component to upload arbitrary files and execute code within them...
CVE-2025-29281
In PerfreeBlog version 4.0.11, regular users can exploit the arbitrary file upload vulnerability in the attach component to upload arbitrary files and execute code within them...
CVE-2025-29281
In PerfreeBlog version 4.0.11, regular users can exploit the arbitrary file upload vulnerability in the attach component to upload arbitrary files and execute code within them...
PT-2025-16499
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description An attacker can upload an arbitrary file instead of a plant image. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...
CVE-2025-29281: Improper Control of Generation of Code
In PerfreeBlog version 4.0.11, regular users can exploit the arbitrary file upload vulnerability in the attach component to upload arbitrary files and execute code within them...
CVE-2025-30510: Insufficient Type Distinction
An attacker can upload an arbitrary file instead of a plant image...
SonicWall NetExtender Remote Access Upload
The vulnerability of the software client for remote access support provided by SonicWall NetExtender is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability could allow attackers to upload arbitrary files...
WordPress JS Job Manager plugin <= 2.0.2 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by LVT-tholv2k in WordPress Plugin JS Job Manager versions = 2.0.2...
WordPress Eximius theme <= 2.2 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Theme Eximius versions = 2.2...
WordPress Celestial Aura plugin <= 2.2 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Theme Celestial Aura versions = 2.2...
WordPress Celestial Aura Theme <= 2.2 is vulnerable to Arbitrary File Upload
Software Celestial Aura Type Theme Vulnerable versions = 2.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Upload CVE CVE-2025-26892 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 6836679a2db2 Credits stealthcopter Required privilege...
StudentManager code issue vulnerabilities
StudentManager is a student management system developed by huanfenz. A code issue exists in StudentManager version 1.0, the vulnerability stems from improper manipulation of the parameter File in the file /upload/uploadArticle.do, which may result in arbitrary file uploads...
uzy-ssm-mall code issue vulnerabilities
uzy-ssm-mall yuzu cloud e-commerce is an SSM framework by ghostxbh personal developer for building e-commerce, bookstore mall, customer management and so on. A code issue vulnerability exists in uzy-ssm-mall version 1.0.0, which stems from improper manipulation of the parameter File in the file...
My-Blog-layui code issues and vulnerabilities
My-Blog-layui is a blog system developed by ZHENFENG13. A code issue exists in My-Blog-layui version 1.0, the vulnerability stems from the wrong operation of the parameter File in the file /admin/upload/authorImg/, which leads to the upload of arbitrary files...
WordPress Eximius Theme <= 2.2 is vulnerable to Arbitrary File Upload
Software Eximius Type Theme Vulnerable versions = 2.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Upload CVE CVE-2025-26872 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 7882f5b4cf65 Credits stealthcopter Required privilege...
Exploit for CVE-2025-32206
CVE-2025-32206 - WordPress Processing Projects "Unrestricted...
CVE-2025-32579 WordPress Sync Posts Plugin <= 1.0 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in SoftClever Limited Sync Posts sync-posts allows Upload a Web Shell to a Web Server.This issue affects Sync Posts: from n/a through = 1.0...
flatCore 1.5 - Cross Site Request Forgery (CSRF)
Exploit Title: flatCore 1.5 - Cross Site Request Forgery CSRF Date: 2024-10-26 Exploit Author: CodeSecLab Vendor Homepage: https://github.com/flatCore/flatCore-CMS Software Link: https://github.com/flatCore/flatCore-CMS Version: d3a5168 Tested on: Ubuntu Windows CVE : CVE-2019-13961 PoC: CSRF PoC...