142 matches found
EUVD-2008-2766
Malware in sbrugna...
EUVD-2021-2296
Malware in sbrugna...
EUVD-2012-1606
Malware in sbrugna...
EUVD-2006-1607
Malware in sbrugna...
EUVD-2022-6645
Malicious code in bioql PyPI...
EUVD-2023-1574
Malicious code in bioql PyPI...
EUVD-2023-34625
Malicious code in bioql PyPI...
EUVD-2025-32302
Malicious code in bioql PyPI...
CVE-2025-60454
A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the image management module, specifically in the app\system\img\admin\imgadmin.class.php component. The vulnerability allows attackers to upload malicious SVG files containi...
CVE-2025-60454
A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the image management module, specifically in the app\system\img\admin\imgadmin.class.php component. The vulnerability allows attackers to upload malicious SVG files containi...
CVE-2025-60454
MetInfo CMS version 8.0 is affected by a stored Cross-Site Scripting (XSS) vulnerability within the image management module , specifically the app emg humb humb.php (referenced in some contexts as app emg humb humb.php or app emg humb humb.php but explicitly identified in these documents as ap...
CVE-2025-60454
A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the image management module, specifically in the app\system\img\admin\imgadmin.class.php component. The vulnerability allows attackers to upload malicious SVG files containi...
Linux Distros Unpatched Vulnerability : CVE-2016-9187
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unrestricted file upload vulnerability in the double extension support in the image module in Moodle 3.1.2 allows remote authenticated users to execute arbitrar...
CVE-2024-26483
An arbitrary file upload vulnerability in the Profile Image module of Kirby CMS v4.1.0 allows attackers to execute arbitrary code via a crafted PDF file...
CVE-2023-31544
A stored cross-site scripting XSS vulnerability in alkacon-OpenCMS v11.0.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title field under the Upload Image module...
BIT-DRUPAL-2022-25275
In some situations, the Image module does not correctly check access to image files not stored in the standard public files directory when generating derivative images using the image styles system. Access to a non-public file is checked only if it is stored in the "private" file system. However,...
Duplicate Advisory: Unrestricted file upload of user avatar images
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xrvh-rvc4-5m43. This link is maintained to preserve external references. Original Description An arbitrary file upload vulnerability in the Profile Image module of Kirby CMS v4.1.0 allows attackers to execute...
GHSA-FR72-9665-W3GR Duplicate Advisory: Unrestricted file upload of user avatar images
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xrvh-rvc4-5m43. This link is maintained to preserve external references. Original Description An arbitrary file upload vulnerability in the Profile Image module of Kirby CMS v4.1.0 allows attackers to execute...
