3 matches found
EUVD-2025-25455
Malicious code in bioql PyPI...
8.8CVSS6.3AI score0.00478EPSS
SaveExploits1References2
CVE-2025-55743
UnoPim is an open-source Product Information Management PIM system built on the Laravel framework. Before 0.2.1, the image upload at the user creation feature performs only client side file type validation. A user can capture the request by uploading an image, capture the request through a Proxy...
8.8CVSS6.2AI score0.00478EPSS
SaveExploits1References1
CVE-2025-32035
DNN (DotNetNuke) prior to version 9.13.2 does not verify file contents during uploads; it only checks file extensions, allowing a malicious file renamed to a benign extension (e.g., executable renamed to .jpg) to be uploaded. The issue is addressed in version 9.13.2. The practical implication is ...
7.5CVSS6.9AI score0.0017EPSS
SaveExploits0References2Affected Software1
20