EUVD-2025-25433

Malicious code in bioql PyPI...

PT-2025-34230 · Moss · Moss

Name of the Vulnerable Software and Affected Versions: Moss versions prior to 0.15 Description: Moss before version 0.15 contains a file upload issue. The configuration of the upload function permits attackers to upload files with any extension to arbitrary locations on the target server...

CVE-2025-22213

Inadequate checks in the Media Manager allowed users with "edit" privileges to change file extension to arbitrary extension, including .php and other potentially executable extensions...

TYPO3 security vulnerabilities

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Typo3 Association. A file upload vulnerability exists in TYPO3, which can be exploited by an attacker to upload arbitrary data with arbitrary file extensions...

PT-2019-13309

Name of the Vulnerable Software and Affected Versions osTicket version 1.10.1 Description The issue allows a remote attacker to gain admin privileges through an unauthenticated stored XSS attack. This is achieved by injecting arbitrary web script or HTML via arbitrary file extensions when creatin...

[SA13657] e107 Image Manager File Upload Vulnerability

TITLE: e107 Image Manager File Upload Vulnerability SECUNIA ADVISORY ID: SA13657 VERIFY ADVISORY: http://secunia.com/advisories/13657/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: e107 0.x http://secunia.com/product/1927/ DESCRIPTION: sysbug has reported a...