1935 matches found
RISE-Ultimate_Project_Manager_e_CRM
CVE-2025-3855 - RISE Ultimate Project Manager - IDOR セキュリティ脆弱性: IDOR（安全でない直接オブジェクト参照） 影響を受けるコンポーネント: プロフィール画像アップロードエンドポイント、teammembers コントローラー ソフトウェア: RISE - Ultimate Project Manager & CRM ベンダー: codecanyon バージョン: 3.8.2 CVE ORG : https://vulners.com/cve/CVE-2025-3855 NIST:...
CVE-2024-36057
CVE-2024-36057 — Koha 图书馆软件 CVE ID： CVE-2024-36057 产品： Koha 图书馆软件 漏洞类型： 操作系统命令注入 CWE-78 CVSS 评分： 8.7（高危）需认证 受影响版本： 低于 22.05.22 致谢： Karolis Narvilas 描述 Koha 是一个开源集成图书馆系统。在 tools/upload-cover-image.pl 的封面图片上传功能中存在命令注入漏洞。该应用程序使用 qx/unzip $filename -d $dirname/ 来解压上传的 ZIP 压缩包，但未对文件名参数进行清理。...
CVE-2026-11112-XXE-via-SVG-Image-Upload
CVE-2026-11112 – 通过 SVG 图片上传实现 XXE 程序代码（Python Flask + XML 解析器） root@kitploit: xxeuploadserver.py - Uploads SVG, renders with lxml resolving entities from flask import Flask, request from lxml import etree app = Flaskname @app.route'/upload', methods='POST' def uploadsvg: svgdata = request.data...
CVE-2026-86749
Snipe-IT versions put... call still caused the application to delete the previous image via deleteExistingImage and to reassign and persist the model's image reference to the new filename, destroying the existing image and leaving the database row pointing at a file that was never written. A mirr...
CVE-2026-86749
Snipe-IT versions up to 8.6.3 contain a data-loss flaw in ImageUploadRequest::handleImages() . The application does not check the return value of Storage::disk('public')->put() or Storage::delete() , so when a storage backend transiently fails (e.g., an S3 network error, filesystem permission ...
CVE-2026-86749 snipe-it before 8.7.0 Data Loss via Failed Image Write
Snipe-IT versions put... call still caused the application to delete the previous image via deleteExistingImage and to reassign and persist the model's image reference to the new filename, destroying the existing image and leaving the database row pointing at a file that was never written. A mirr...
EUVD-2026-74926
Snipe-IT versions put... call still caused the application to delete the previous image via deleteExistingImage and to reassign and persist the model's image reference to the new filename, destroying the existing image and leaving the database row pointing at a file that was never written. A mirr...
CVE-2026-78741
Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS in the wysiwyg-CKEditor image upload feature...
EUVD-2026-74260
Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS in the wysiwyg-CKEditor image upload feature...
CVE-2026-78741
Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS in the wysiwyg-CKEditor image upload feature...
CVE-2026-78741
Silverpeas Core versions up to 6.4.6 are affected by a Cross-Site Scripting (XSS) vulnerability in the wysiwyg-CKEditor image upload feature. The flaw allows an unauthenticated remote attacker, with user interaction, to inject malicious scripts via the image upload mechanism, resulting in a chang...
EUVD-2026-69416
An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...
CVE-2026-51974
An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...
CVE-2026-54179
backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.37, the src/app/Library/Uploaders/SingleBase64Image.php methods SingleBase64Image::uploadFiles and...
EUVD-2026-43671
TYPO3 CMS - Unrestricted File Upload in Form Framework...
PT-2026-83429
Name of the Vulnerable Software and Affected Versions BookStack versions prior to 26.05.4 Description An authenticated remote code execution issue exists in the portable ZIP import functionality. Users possessing both Import Content and Create Books permissions can upload a PHP-image polyglot...
CVE-2026-18886 Unauthenticated Privilege Escalation via System Configuration Image Upload Processor
ServiceNow has remediated an improper access control vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to create or modify instance data beyond what was intended, resulting in privilege escalation. ...
CVE-2026-18886
CVE-2026-18886 is an improper access control vulnerability in the ServiceNow AI platform , specifically in the System Configuration Image Upload Processor . An unauthenticated user can, in certain circumstances, create or modify instance data beyond intended scope, leading to privilege escalation...
CVE-2026-18886 Unauthenticated Privilege Escalation via System Configuration Image Upload Processor
ServiceNow has remediated an improper access control vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to create or modify instance data beyond what was intended, resulting in privilege escalation. ...