PT-2026-48810

Impact The ext in upload validation rule checked the MIME-derived guessed extension instead of the client-provided filename extension. As a result, an uploaded file named shell.php containing GIF-like content could pass validation such as: uploadedavatar|is imageavatar|mime inavatar,image/gif|ext...

Resty has a Path Traversal vulnerability

A security vulnerability has been detected in Dreampie Resty versions up to the 1.3.1.SNAPSHOT. This affects the function Request of the file /resty-httpclient/src/main/java/cn/dreampie/client/HttpClient.java of the component HttpClient Module. Such manipulation of the argument filename leads to...

Novell Messenger Client Filename Parameter Stack Buffer Overflow (CVE-2013-1085)

A stack buffer over flow has been reported in Novell Messenger client...