CVE-2025-70995

CVE-2025-70995 concerns Aranda Service Desk Web Edition (ASDK API 8.6). An authenticated user can upload a crafted web.config via POST to /ASDKAPI/api/v8.6/item/addfile, which is processed by the ASP.NET runtime, altering the upload directory’s execution context to allow compilation and execution...

PT-2026-23513

Name of the Vulnerable Software and Affected Versions Aranda Service Desk Web Edition ASDK API version 8.6 Description An issue allows authenticated attackers to achieve remote code execution due to improper validation of uploaded files. An authenticated user can upload a crafted web.config file ...

Unrestricted file upload

File upload vulnerability in Umbraco Forms v.8.7.0 allows unauthenticated attackers to execute arbitrary code via a crafted web.config and asp file...

CVE-2021-33224

File upload vulnerability in Umbraco Forms v.8.7.0 allows unauthenticated attackers to execute arbitrary code via a crafted web.config and asp file...