EUVD-2025-29649

Malicious code in bioql PyPI...

CVE-2025-56263

by-night sms V1.0 has an Arbitrary File Upload vulnerability. The /api/sms/upload/headImg endpoint allows uploading arbitrary files. Users can upload files of any size and type...

CVE-2025-56263

by-night sms V1.0 has an Arbitrary File Upload vulnerability. The /api/sms/upload/headImg endpoint allows uploading arbitrary files. Users can upload files of any size and type...

CVE-2025-56263

by-night sms V1.0 has an Arbitrary File Upload vulnerability. The /api/sms/upload/headImg endpoint allows uploading arbitrary files. Users can upload files of any size and type...

CVE-2025-56263

by-night sms V1.0 has an Arbitrary File Upload vulnerability. The /api/sms/upload/headImg endpoint allows uploading arbitrary files. Users can upload files of any size and type...

SMS security vulnerabilities

sms is a student grade management system by Jeffrey Personal Developer. A security vulnerability exists in version 1.0 of sms, which stems from the /api/sms/upload/headImg endpoint that allows the uploading of arbitrary files, which could lead to an arbitrary file upload attack...

PT-2025-38078

Name of the Vulnerable Software and Affected Versions by-night sms version 1.0 Description The /api/sms/upload/headImg endpoint allows the upload of arbitrary files. Users can upload files of any size and type. Recommendations As a temporary workaround, consider restricting access to the...

CVE-2025-56263

The by-night sms student grade management system (version 1.0 ) is vulnerable to an Arbitrary File Upload vulnerability via the /api/sms/upload/headImg endpoint. The root cause is that the application fails to restrict the type and size of files during the upload process, allowing users to upload...