14740 matches found
CVE-2024-13981
LiveBOS Server (Apex Software Co., Ltd.) exposes an arbitrary file upload vulnerability in the UploadFile.do;.js.jsp endpoint. The flaw allows unauthenticated remote attackers to upload files outside the intended directory via path traversal in the filename parameter, potentially enabling remote ...
CVE-2025-34163
Dongsheng Logistics Software is affected by CVE-2025-34163 due to an unauthenticated endpoint at /CommMng/Print/UploadMailFile that does not validate file types or enforce proper access control. A crafted multipart/form-data POST enables uploading arbitrary files, including executable scripts suc...
CVE-2025-34163 Dongsheng Logistics Software Unauthenticated Arbitrary File Upload
Dongsheng Logistics Software exposes an unauthenticated endpoint at /CommMng/Print/UploadMailFile that fails to enforce proper file type validation and access control. An attacker can upload arbitrary files, including executable scripts such as .ashx, via a crafted multipart/form-data POST reques...
CVE-2025-34163
Dongsheng Logistics Software exposes an unauthenticated endpoint at /CommMng/Print/UploadMailFile that fails to enforce proper file type validation and access control. An attacker can upload arbitrary files, including executable scripts such as .ashx, via a crafted multipart/form-data POST reques...
CVE-2023-7309 Dahua Smart Park Integrated Management Platform Front-End Arbitrary File Upload
A path traversal vulnerability exists in the Dahua Smart Park Integrated Management Platform also referred to as the Dahua Smart Campus Integrated Management Platform, affecting the SOAP-based GIS bitmap upload interface. The flaw allows unauthenticated remote attackers to upload arbitrary files ...
WordPress Zippy plugin <= 1.7.0 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by 63n0 in WordPress Plugin Zippy versions = 1.7.0...
WordPress Pin WP theme < 7.2 - Arbitrary File Upload Vulnerability
Arbitrary File Upload Vulnerability discovered by Bonds Patchstack Alliance in WordPress Theme Pin WP versions 7.2...
Linux Distros Unpatched Vulnerability : CVE-2025-1754
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions from 17.2 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed...
Apex LiveBOS 安全漏洞
Apex LiveBOS is a rapid development tool from China Vertex Apex. Apex LiveBOS suffers from a security vulnerability that originates from path traversal and could lead to arbitrary file uploads and remote code execution...
WordPress Pin WP Theme < 7.2 is vulnerable to Arbitrary File Upload
Software Pin WP Type Theme Vulnerable versions 7.2 Fixed in 7.2 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2025-53251 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 85f8a3209836 Credits Bonds Required privilege Subscriber Published 27 August...
Arbitrary File Upload
Overview badaso/core is an API and platform builder Affected versions of this package are vulnerable to Arbitrary File Upload via the file-upload process. An attacker can execute arbitrary code on the server by uploading a file containing embedded PHP code, bypassing content-type validation, and...
WordPress Drag and Drop File Upload for Elementor Forms Plugin <= 1.5.3 - Arbitrary File Upload Vulnerability
Arbitrary File Upload Vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Drag and Drop File Upload for Elementor Forms versions = 1.5.3...
StoryChief Wordpress Plugin 1.0.42 - Arbitrary File Upload
Exploit Title: StoryChief Wordpress Plugin 1.0.42 - Arbitrary File Upload Exploit Author: xpl0dec Vendor Homepage: https://www.storychief.io/wordpress-content-scheduler Software Link: https://github.com/Story-Chief/wordpress/ Version: ”; ? 2. Adjust the echo phpinfo section as needed 3. Host it o...
SourceCodester Human Resource Information System 安全漏洞
SourceCodester Human Resource Information System is an open source human resource information system from SourceCodester. A security vulnerability exists in SourceCodester Human Resource Information System version 1.0, which originates from a misbehavior of the parameter employee in the file...
📄 WordPress StoryChief 1.0.42 Shell Upload
WordPress StoryChief plugin versions 1.0.42 and below suffer from a remote shell upload vulnerability. Exploit Title: StoryChief Wordpress Plugin 1.0.42 - Arbitrary File Upload Exploit Author: xpl0dec Vendor Homepage: https://www.storychief.io/wordpress-content-scheduler Software Link:...
SourceCodester Human Resource Information System 安全漏洞
SourceCodester Human Resource Information System is an open source human resource information system from SourceCodester. A security vulnerability exists in SourceCodester Human Resource Information System version 1.0, which originates from a misbehavior of the parameter employee in the file...
WordPress Premium Age Verification / Restriction for WordPress Plugin <= 3.0.2 - Arbitrary File Upload Vulnerability
Arbitrary File Upload Vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Premium Age Verification / Restriction for WordPress versions = 3.0.2...
Linux Distros Unpatched Vulnerability : CVE-2019-10182
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was found that icedtea-web though 1.7.2 and 1.8.2 did not properly sanitize paths from elements in JNLP files. An attacker could trick a victim into running ...
