CVE-2025-62421: Improper Neutralization of Input During Web Page Generation

DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a stored cross-site scripting vulnerability exists due to improper file upload validation and authentication bypass. The StaticResourceApi interface defines a route upload/fileId that uses a URL path...

CVE-2023-28814: Unrestricted Upload of File with Dangerous Type

Some versions of Hikvision's iSecure Center Product have an improper file upload control vulnerability. Due to the improper verification of file to be uploaded, attackers may upload malicious files to the server. iSecure Center is software released for China's domestic market only, with no overse...

Remote Code Execution (RCE)

mahocommerce/maho is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper validation of uploaded file types in the product management module, which allows an attacker with staff access to upload malicious .php files and execute arbitrary code on the server...

EUVD-2019-2871

Malware in sbrugna...

EUVD-2021-23681

Malware in sbrugna...

EUVD-2017-11876

Malware in sbrugna...

EUVD-2017-0193

Malware in sbrugna...

EUVD-2018-3124

Malware in sbrugna...

EUVD-2024-23258

Malicious code in bioql PyPI...

EUVD-2024-48421

Malicious code in bioql PyPI...

EUVD-2023-36573

Malicious code in bioql PyPI...

EUVD-2022-33624

Malicious code in bioql PyPI...

EUVD-2025-25392

Malicious code in bioql PyPI...

EUVD-2023-46476

Malicious code in bioql PyPI...

EUVD-2021-28674

Malicious code in bioql PyPI...

EUVD-2024-18074

Malicious code in bioql PyPI...

CVE-2025-61734 Apache Kylin: improper restriction of file read

Files or Directories Accessible to External Parties vulnerability in Apache Kylin. You are fine as long as the Kylin's system and project admin access is well protected. This issue affects Apache Kylin: from 4.0.0 through 5.0.2. Users are recommended to upgrade to version 5.0.3, which fixes the...

PT-2025-40310

Name of the Vulnerable Software and Affected Versions Apache Kylin versions 4.0.0 through 5.0.2 Description An authentication bypass issue exists in Apache Kylin. This allows bypassing normal authentication mechanisms through an alternate path or channel. Recommendations Upgrade to version 5.0.3 ...

Medical Informatics Engineering Enterprise Health 安全漏洞

Medical Informatics Engineering Enterprise Health is a healthcare solution from US-based Medical Informatics Engineering. A security vulnerability exists in Medical Informatics Engineering Enterprise Health that stems from allowing authenticated users to upload arbitrary files, which could result...

N-able N-central 安全漏洞

N-able N-central is an RMM platform from N-able Canada Inc. providing large-scale management, automation and orchestration capabilities for sophisticated MSPs and IT professionals. A security vulnerability exists in N-able N-central that stems from improper file handling permissions, which could...