14797 matches found
VulnCheck KEV: CVE-2024-4345
The Startklar Elementor Addons plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'process' function in the 'startklarDropZoneUploadProcess' class in versions up to, and including, 1.7.13. This makes it possible for unauthenticated...
WordPress Pk Favicon Manager Plugin <=2.1 is vulnerable to Arbitrary File Upload
Software Pk Favicon Manager Type Plugin Vulnerable versions =2.1 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Arbitrary File Upload CVE CVE-2024-34416 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID 4605b4908c9e Credits Roby Firnando Yusuf Required privileg...
CVE-2024-33786
An arbitrary file upload vulnerability in Zhongcheng Kexin Ticketing Management Platform 20.04 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2023-51590
Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. T...
CVE-2023-39462
Triangle MicroWorks SCADA Data Gateway Workspace Unrestricted Upload Vulnerability. This vulnerability allows remote attackers to upload arbitrary files on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is required to exploit this vulnerability, the...
CVE-2023-38098
NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is required to...
CVE-2023-38095
NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is...
NETGEAR ProSAFE 安全漏洞
NETGEAR ProSAFE is a network management system from NETGEAR. An arbitrary file upload vulnerability exists in NETGEAR ProSAFE, which can be exploited by an attacker to execute arbitrary code...
CVE-2024-33786
CVE-2024-33786: An arbitrary file upload vulnerability affects Zhongcheng Kexin Ticketing Management Platform (version 20.04). The exposed flaw allows attackers to execute arbitrary code by uploading a crafted file. Sources consistently reference the product and 20.04, with no explicit fixed vers...
CVE-2024-33786
An arbitrary file upload vulnerability in Zhongcheng Kexin Ticketing Management Platform 20.04 allows attackers to execute arbitrary code via uploading a crafted file...
PT-2024-25479 · Unknown · Zhongcheng Kexin Ticketing Management Platform
Name of the Vulnerable Software and Affected Versions: Zhongcheng Kexin Ticketing Management Platform version 20.04 Description: The issue allows attackers to execute arbitrary code via uploading a crafted file, exploiting an arbitrary file upload vulnerability. Recommendations: For Zhongcheng...
Zhongcheng Kexin Ticketing Management Platform 安全漏洞
Zhongcheng Kexin Ticketing Management Platform Zhongcheng Kexin Ticketing Management Platform is a ticketing management platform from the Chinese company Zhongcheng Kexin Zhongcheng Kexin. A security vulnerability exists in Zhongcheng Kexin Ticketing Management Platform version 20.04, which stems...
NETGEAR ProSAFE 安全漏洞
NETGEAR ProSAFE is a network management system from NETGEAR. An arbitrary file upload vulnerability exists in NETGEAR ProSAFE, which can be exploited by an attacker to execute arbitrary code...
CVE-2024-4033 All-in-One Video Gallery <= 3.6.4 - Authenticated (Contributor+) Arbitrary File Upload via featured image
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the aiovgcreateattachmentfromexternalimageurl function in all versions up to, and including, 3.6.4. This makes it possible for authenticated attackers, with contributor...
CVE-2024-4033 All-in-One Video Gallery <= 3.6.4 - Authenticated (Contributor+) Arbitrary File Upload via featured image
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the aiovgcreateattachmentfromexternalimageurl function in all versions up to, and including, 3.6.4. This makes it possible for authenticated attackers, with contributor...
CVE-2024-33913
Cross-Site Request Forgery CSRF vulnerability leading to Arbitrary File Upload in Xserver Migrator.This issue affects Xserver Migrator: from n/a through 1.6.1...
CVE-2024-33913 WordPress Xserver Migrator plugin <= 1.6.1 - CSRF to Arbitrary File Upload vulnerability
Cross-Site Request Forgery CSRF vulnerability leading to Arbitrary File Upload in Xserver Migrator.This issue affects Xserver Migrator: from n/a through 1.6.1...
CVE-2024-33913
CVE-2024-33913 is a CSRF to Arbitrary File Upload vulnerability in the Xserver Migrator WordPress plugin. The issue affects Xserver Migrator versions from <= 1.6.1 (per initial description) and is confirmed as being patched in newer builds (patched status in connected CVE references; Xserver M...
CVE-2024-33913 WordPress Xserver Migrator plugin <= 1.6.1 - CSRF to Arbitrary File Upload vulnerability
Cross-Site Request Forgery CSRF vulnerability leading to Arbitrary File Upload in Xserver Migrator.This issue affects Xserver Migrator: from n/a through 1.6.1...
WordPress Plugin ElementsKit Pro 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...