17471 matches found
CVE-2024-57407
Timo version v2.0.3 , a backend management system, contains an arbitrary file upload vulnerability in the /userPicture component. An attacker can exploit this flaw by uploading a specially crafted file to achieve arbitrary code execution . As no patch is currently provided, it is recommended to d...
CVE-2024-57407: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the component /userPicture of Timo v2.0.3 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-13011: Unrestricted Upload of File with Dangerous Type
The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'uploadpublisherprofileimage' function in versions up to, and including, 4.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affect...
CVE-2024-57408: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the component /comm/upload of cool-admin-java v1.0 allows attackers to execute arbitrary code via uploading a crafted file...
PT-2025-6075
Name of the Vulnerable Software and Affected Versions cool-admin-java version 1.0 Description An arbitrary file upload vulnerability in the component /comm/upload allows attackers to execute arbitrary code via uploading a crafted file. This issue enables attackers to upload malicious files,...
CVE-2024-57668
In Code-projects Shopping Portal v1.0, the insert-product.php page has an arbitrary file upload vulnerability...
CVE-2024-57668
In Code-projects Shopping Portal v1.0, the insert-product.php page has an arbitrary file upload vulnerability...
Arbitrary File Upload
Cockpit is vulnerable to Arbitrary File Upload. The vulnerability is due to insufficient file extension filtering due to an attacker being able to bypass the upload filter by using different file extensions...
CVE-2021-4330
The Envato Elements & Download and Template Kit – Import plugins for WordPress are vulnerable to arbitrary file uploads due to insufficient validation of file type upon extracting uploaded Zip files in the installFreeTemplateKit and uploadTemplateKitZipFile functions. This makes it possible for...
CVE-2021-26642
When uploading an image file to a bulletin board developed with XpressEngine, a vulnerability in which an arbitrary file can be uploaded due to insufficient verification of the file. A remote attacker can use this vulnerability to execute arbitrary code on the server where the bulletin board is...
CVE-2016-15033
The Delete All Comments plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the via the delete-all-comments.php file in versions up to, and including, 2.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affecte...
OpenPLC security vulnerabilities
OpenPLC is an open source programmable logic controller from the individual developer Thiago Alves. It can provide low-cost industrial solutions for automation and research. A security vulnerability exists in OpenPLC version 3, which stems from the inclusion of an arbitrary file upload...
CVE-2024-57668
In Code-projects Shopping Portal v1.0, the insert-product.php page has an arbitrary file upload vulnerability...
PT-2025-5855
Name of the Vulnerable Software and Affected Versions Code-projects Shopping Portal version 1.0 Description The issue concerns an arbitrary file upload vulnerability in the insert-product.php page. This means that an attacker could potentially upload malicious files to the server, which could lea...
CVE-2024-57668
CVE-2024-57668 concerns Code-projects Shopping Portal v1.0 where insert-product.php contains an arbitrary file upload vulnerability. Multiple connected sources confirm the flaw, tying it to the insert-product.php upload handling, with potential impacts on confidentiality, integrity, and availabil...
CVE-2025-1066: Undefined Security Weakness
OpenPLCV3 contains an arbitrary file upload vulnerability, which could be leveraged for malvertising or phishing campaigns...
CVE-2024-57668
In Code-projects Shopping Portal v1.0, the insert-product.php page has an arbitrary file upload vulnerability...
CVE-2024-57668: Unrestricted Upload of File with Dangerous Type
In Code-projects Shopping Portal v1.0, the insert-product.php page has an arbitrary file upload vulnerability...
CVE-2025-1066
OpenPLC_V3 contains an arbitrary file upload vulnerability that can be leveraged for malvertising or phishing campaigns. The affected software is an open-source programmable logic controller developed by Thiago Alves, used for industrial automation and research. While the specific version affecte...
