Lucene search
+L

6 matches found

NVD
NVD
•added 2026/01/19 12:15 p.m.•14 views

CVE-2026-1152

A security vulnerability has been detected in technical-laohu mpay up to 1.2.4. The impacted element is an unknown function of the component QR Code Image Handler. Such manipulation of the argument codeimg leads to unrestricted upload. The attack may be launched remotely. The exploit has been...

9.8CVSS0.00347EPSS
SaveExploits1References4
OSV
OSV
•added 2026/01/19 12:15 p.m.•17 views

CVE-2026-1152

A security vulnerability has been detected in technical-laohu mpay up to 1.2.4. The impacted element is an unknown function of the component QR Code Image Handler. Such manipulation of the argument codeimg leads to unrestricted upload. The attack may be launched remotely. The exploit has been...

9.8CVSS5.4AI score0.00347EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/01/19 11:32 a.m.•8 views

CVE-2026-1152

A security vulnerability has been detected in technical-laohu mpay up to 1.2.4. The impacted element is an unknown function of the component QR Code Image Handler. Such manipulation of the argument codeimg leads to unrestricted upload. The attack may be launched remotely. The exploit has been...

9.8CVSS5.1AI score0.00347EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2026/01/19 11:32 a.m.•59 views

CVE-2026-1152

The affected software is technical-laohu mpay (versions up to 1.2.4). A vulnerability in the QR Code Image Handler allows manipulation of the codeimg argument that leads to unrestricted file upload. This can be exploited remotely, and public exploits have been disclosed. Remediation per PSIRT/PT ...

9.8CVSS5.3AI score0.00347EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/01/19 11:32 a.m.•9 views

CVE-2026-1152 technical-laohu mpay QR Code Image unrestricted upload

A security vulnerability has been detected in technical-laohu mpay up to 1.2.4. The impacted element is an unknown function of the component QR Code Image Handler. Such manipulation of the argument codeimg leads to unrestricted upload. The attack may be launched remotely. The exploit has been...

5.8CVSS5.3AI score0.00347EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/19 12:00 a.m.•1 views

CVE-2026-1152: Unrestricted Upload of File with Dangerous Type

A security vulnerability has been detected in technical-laohu mpay up to 1.2.4. The impacted element is an unknown function of the component QR Code Image Handler. Such manipulation of the argument codeimg leads to unrestricted upload. The attack may be launched remotely. The exploit has been...

9.8CVSS5AI score0.00347EPSS
SaveExploits1References1
Rows per page
Query Builder