3 matches found
EUVD-2025-9930
Malicious code in bioql PyPI...
9.8CVSS8.7AI score0.59066EPSS
SaveExploits3References4
CVE-2025-32370
Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file extensions for unauthenticated uploads; however, because .zip is processed through TryZipProviderSafe, there is additional functionality to create files with other extensions. NOTE: this is a separate issue not...
9.8CVSS7.3AI score0.01462EPSS
SaveExploits3References1
CVE-2025-32370
Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file extensions for unauthenticated uploads; however, because .zip is processed through TryZipProviderSafe, there is additional functionality to create files with other extensions. NOTE: this is a separate issue not...
7.2CVSS7AI score0.01462EPSS
SaveExploits3References2
20