14794 matches found
CVE-2024-35592
An arbitrary file upload vulnerability in the Upload function of Box-IM v2.0 allows attackers to execute arbitrary code via uploading a crafted PDF file...
CVE-2024-35592
CVE-2024-35592 affects Box-IM, specifically version 2.0. The vulnerability is an arbitrary file upload in the Upload function that enables arbitrary code execution via a crafted PDF file. The available sources indicate a high-severity impact (CVSS 3.1: 9.6, CRITICAL) with network vector, no privi...
CVE-2024-35591
An arbitrary file upload vulnerability in O2OA v8.3.8 allows attackers to execute arbitrary code via uploading a crafted PDF file...
CVE-2024-35591
CVE-2024-35591 affects O2OA version 8.3.8. The issue is an arbitrary file upload vulnerability in the application that allows an attacker to execute arbitrary code by uploading a crafted PDF file. The available connected sources describe the vulnerable component as the O2OA upload handling, with ...
CVE-2024-35591
An arbitrary file upload vulnerability in O2OA v8.3.8 allows attackers to execute arbitrary code via uploading a crafted PDF file...
CVE-2024-35593
An arbitrary file upload vulnerability in the File preview function of Raingad IM v4.1.4 allows attackers to execute arbitrary code via uploading a crafted PDF file...
CVE-2024-35593
An arbitrary file upload vulnerability in the File preview function of Raingad IM v4.1.4 allows attackers to execute arbitrary code via uploading a crafted PDF file...
CVE-2024-35593
CVE-2024-35593 affects Raingad IM v4.1.4 with an arbitrary file upload vulnerability in the File preview feature that can lead to arbitrary code execution through a crafted PDF. Concrete details in connected sources confirm the affected product/version and the underlying issue is an arbitrary fil...
CVE-2024-35595
An arbitrary file upload vulnerability in the File Preview function of Xintongda OA v2023.12.30.1 allows attackers to execute arbitrary code via uploading a crafted PDF file...
PT-2024-26564 · Box-Im · Box-Im
Name of the Vulnerable Software and Affected Versions: Box-IM version 2.0 Description: The issue allows attackers to execute arbitrary code via uploading a crafted PDF file, exploiting an arbitrary file upload vulnerability in the Upload function. Recommendations: For Box-IM version 2.0, consider...
Vaultize 安全漏洞
Vaultize is an enterprise platform from Vaultize, Inc. A security vulnerability exists in Vaultize version 21.07.27, which stems from a lack of filename filtering, resulting in an arbitrary file upload vulnerability...
PT-2024-26565 · Unknown · Raingad Im
Name of the Vulnerable Software and Affected Versions: Raingad IM version 4.1.4 Description: The issue is related to an arbitrary file upload vulnerability in the File preview function, allowing attackers to execute arbitrary code by uploading a crafted PDF file. Recommendations: For Raingad IM...
O2OA 安全漏洞
O2OA is an enterprise application development platform from O2OA open source. A security vulnerability exists in O2OA v8.3.8, which stems from the presence of an arbitrary file upload vulnerability that allows an attacker to execute arbitrary code by uploading a crafted PDF file...
Raingad IM 安全漏洞
Raingad IM is a Raingad IM company that can be used to quickly build an internal enterprise chat application. A security vulnerability exists in Raingad IM v4.1.4, which originates from an arbitrary file upload vulnerability in the file preview feature, which can be exploited by an attacker to...
PT-2024-26566 · Xintongda · Xintongda Oa
Name of the Vulnerable Software and Affected Versions: Xintongda OA version 2023.12.30.1 Description: The issue is related to an arbitrary file upload vulnerability in the File Preview function, allowing attackers to execute arbitrary code by uploading a crafted PDF file. Recommendations: For...
TONGDA Office Anywhere 安全漏洞
TONGDA Office Anywhere is a collaborative office OA system. A security vulnerability exists in TONGDA Office Anywhere v2023.12.30.1, which originates from an arbitrary file upload vulnerability in the file preview function, which can be exploited by an attacker to execute arbitrary code by...
The vulnerability of the Firmware Upload Handler component of the Siemens RUGGEDCOM CROSSBOW secure access control system allows a perpetrator to upload arbitrary files and execute arbitrary code.
The vulnerability of the Firmware Upload Handler component of the Siemens RUGGEDCOM CROSSBOW access control system is related to incorrect external manipulation of file names or files. Exploiting this vulnerability allows a malicious actor to upload arbitrary files and execute arbitrary code...
CVE-2024-35080
An arbitrary file upload vulnerability in the gok4 method of inxedu v2024.4 allows attackers to execute arbitrary code via uploading a crafted .jsp file...
