14869 matches found
Exploit for CVE-2022-0316
Wordpress Multiple themes - Unauthenticated Arbitrary File Upl...
The vulnerability of the mDNSResponder.exe executable software used for configuring and managing Dante-enabled Zoom Rooms allows a attacker to load arbitrary files.
The vulnerability of software for configuring and managing Dante-enabled Zoom Rooms relates to incorrect handling of the search path. Exploiting this vulnerability could allow a malicious actor to upload arbitrary files remotely...
PT-2023-3789 · NetGear · Netgear Prosafe Network Management System
Name of the Vulnerable Software and Affected Versions: NETGEAR ProSAFE Network Management System affected versions not specified Description: The issue is related to the lack of proper validation of user-supplied data in the MFileUploadController class, allowing the upload of arbitrary files. Thi...
CVE-2023-22735
CVE-2023-22735 affects Zulip: prior to commit 2f6c5a8 but after 04cf68b, files uploaded with arbitrary Content-Type could be served from the Zulip hostname with Content-Disposition: inline and without a Content-Security-Policy header, enabling execution of arbitrary JavaScript in the Zulip contex...
CVE-2022-21587: Rapid7 Observed Exploitation of Oracle E-Business Suite Vulnerability
Emergent threats evolve quickly, and as we learn more about this vulnerability, this blog post will evolve, too. Rapid7 is responding to various compromises arising from the exploitation of CVE-2022-21587, a critical arbitrary file upload vulnerability rated 9.8 on the CVSS v3 risk metric impacti...
CVE-2022-45544
Insecure Permission vulnerability in Schlix Web Inc SCHLIX CMS 2.2.7-2 allows attacker to upload arbitrary files and execute arbitrary code via the tristao parameter. NOTE: this is disputed by the vendor because an admin is intentionally allowed to upload new executable PHP code, such as a theme...
Design/Logic Flaw
DISPUTED Insecure Permission vulnerability in Schlix Web Inc SCHLIX CMS 2.2.7-2 allows attacker to upload arbitrary files and execute arbitrary code via the tristao parameter. NOTE: this is disputed by the vendor because an admin is intentionally allowed to upload new executable PHP code, such as...
CVE-2022-45544
Schlix CMS 2.2.7-2 contains an insecure permission flaw that allows an attacker to upload arbitrary files and execute arbitrary code via the tristao parameter. The vendor disputes that this is a generic vulnerability, arguing only admins should be able to upload executable PHP code. Public report...
Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Arbitrary File Upload (cisco-sa-sb-rv-afu-EXxwA65V)
According to its self-reported version, Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers are affected by an arbitrary file upload vulnerability due to insufficient authorization enforcement mechanisms. An unauthenticated, remote attacker can exploit this to upload arbitrary...
Schlix CMS 安全漏洞
Schlix CMS is an open source content management system CMS based on PHP and MySQL. A security vulnerability exists in Schlix CMS version 2.2.7-2. An attacker can exploit the vulnerability to upload arbitrary files and execute arbitrary code via the tristao parameter...
PT-2023-14700 · Schlix Web · Schlix Cms
Name of the Vulnerable Software and Affected Versions: Schlix Web Inc SCHLIX CMS version 2.2.7-2 Description: The issue allows an attacker to upload arbitrary files and execute arbitrary code via the tristao parameter. However, it is noted that this functionality is intentionally allowed for admi...
CVE-2023-23135
An arbitrary file upload vulnerability in Ftdms v3.1.6 allows attackers to execute arbitrary code via uploading a crafted JPG file...
CVE-2023-23135
An arbitrary file upload vulnerability in Ftdms v3.1.6 allows attackers to execute arbitrary code via uploading a crafted JPG file...
Privilege escalation
An arbitrary file upload vulnerability in Ftdms v3.1.6 allows attackers to execute arbitrary code via uploading a crafted JPG file...
LimeSurvey <= 5.4.15 Multiple Vulnerabilities
LimeSurvey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:limesurvey:limesurvey";...
CVE-2023-23135
An arbitrary file upload vulnerability in Ftdms v3.1.6 allows attackers to execute arbitrary code via uploading a crafted JPG file...
CVE-2023-23135
An arbitrary file upload vulnerability in Ftdms v3.1.6 allows attackers to execute arbitrary code via uploading a crafted JPG file...
Serenissima Informatica Fast Checkin 代码问题漏洞
Serenissima Informatica Fast Checkin is an application from Serenissima, Inc. A security vulnerability exists in Serenissima Informatica Fast Checkin version 1.0, which originates from a vulnerability that allows an unauthenticated attacker to access the server via the web shell by uploading...