CVE-2025-34163

Dongsheng Logistics Software exposes an unauthenticated endpoint at /CommMng/Print/UploadMailFile that fails to enforce proper file type validation and access control. An attacker can upload arbitrary files, including executable scripts such as .ashx, via a crafted multipart/form-data POST reques...

PT-2024-25271

Name of the Vulnerable Software and Affected Versions Byzoro Smart S80 up to 20240328 Description A critical issue affects the unknown code of the file /log/webmailattach.php. The manipulation of the mail file path argument leads to os command injection. This issue can be initiated remotely. The...