CVE-2023-43838

CVE-2023-43838 ثغرة رفع ملفات تعسفية في نظام الإدارة الشخصية v1.4.64 تسمح للمهاجمين بتنفيذ تعليمات برمجية عشوائية عن طريق رفع ملف SVG مفبرك إلى صورة الرمز الشخصي للمستخدم. معلومات إضافية 1. قم بإنشاء ملف alert.svg بالمحتوى التالي: root@kitploit: alert"huntr.dev"; 2. استضف ملف .SVG على خادم ويب. 3...

CVE-2026-40526

Volmarg Personal Management System contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying absolute filesystem paths to the GET /public/get-file/path endpoint. The path route parameter is passed directly to filegetcontents without...

EUVD-2026-67124

Volmarg Personal Management System contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying absolute filesystem paths to the GET /public/get-file/path endpoint. The path route parameter is passed directly to filegetcontents without...

CVE-2025-28355

CVE-2025-28355 È stato identificato che l'applicazione https://github.com/Volmarg/personal-management-system è vulnerabile ad attacchi CSRF. Una delle molte azioni che un attaccante può eseguire è ingannare un utente legittimo per fargli eseguire una richiesta cross-site che modificherà la sua...

CVE-2023-43838

An arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to execute arbitrary code via uploading a crafted SVG file into a user profile's avatar...

EUVD-2025-12364

Malicious code in bioql PyPI...

EUVD-2025-11801

Malicious code in bioql PyPI...

EUVD-2025-12206

Malicious code in bioql PyPI...

EUVD-2025-12366

Malicious code in bioql PyPI...

EUVD-2023-48201

Malicious code in bioql PyPI...

EUVD-2023-37550

Malicious code in bioql PyPI...

EUVD-2025-11798

Malicious code in bioql PyPI...

EUVD-2025-12265

Malicious code in bioql PyPI...

EUVD-2024-26329

Malicious code in bioql PyPI...

CVE-2024-29318

Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting XSS via upload of a SVG file with embedded javascript code...

CVE-2024-29319

Volmarg Personal Management System 1.4.64 is vulnerable to SSRF Server Side Request Forgery via uploading a SVG file. The server can make unintended HTTP and DNS requests to a server that the attacker controls...

CVE-2025-29456

An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the create Notes function...

CVE-2025-29454

An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the Upload function...

CVE-2025-29455

An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the Travel Ideas" function...

CVE-2025-29453

An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the my-contacts-settings component...