117 matches found
CVE-2023-43838
CVE-2023-43838 An arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to execute arbitrary code via uploading a crafted SVG file into a user profile's avatar. Additional Information 1. Create alert.svg with the following content: alert"huntr.dev"; 2. Host .S...
CVE-2025-28355
CVE-2025-28355 It was identified that the https://github.com/Volmarg/personal-management-system application is vulnerable to CSRF attacks, one of the many action an attacker can perform is trick a legitimate user to run a cross site request that will alter his/her password, allowing the attacker...
CVE-2026-40526
Volmarg Personal Management System contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying absolute filesystem paths to the GET /public/get-file/path endpoint. The path route parameter is passed directly to filegetcontents without...
CVE-2026-40526
Volmarg Personal Management System contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying absolute filesystem paths to the GET /public/get-file/path endpoint. The path route parameter is passed directly to filegetcontents without...
EUVD-2026-67124
Volmarg Personal Management System contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying absolute filesystem paths to the GET /public/get-file/path endpoint. The path route parameter is passed directly to filegetcontents without...
CVE-2026-40526 Volmarg Personal Management System Path Traversal via get-file Endpoint
Volmarg Personal Management System contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying absolute filesystem paths to the GET /public/get-file/path endpoint. The path route parameter is passed directly to filegetcontents without...
PT-2026-82538
Name of the Vulnerable Software and Affected Versions Volmarg Personal Management System affected versions not specified Description Authenticated attackers can read arbitrary files by providing absolute filesystem paths to the 'GET /public/get-file/path' endpoint. This occurs because the path...
CVE-2026-40526: Improper Limitation of a Pathname to a Restricted Directory
Volmarg Personal Management System contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying absolute filesystem paths to the GET /public/get-file/path endpoint. The path route parameter is passed directly to filegetcontents without...
CVE-2023-43838
An arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to execute arbitrary code via uploading a crafted SVG file into a user profile's avatar...
EUVD-2023-37550
Malicious code in bioql PyPI...
EUVD-2025-12364
Malicious code in bioql PyPI...
EUVD-2025-11801
Malicious code in bioql PyPI...
EUVD-2025-12206
Malicious code in bioql PyPI...
EUVD-2025-12265
Malicious code in bioql PyPI...
EUVD-2024-26329
Malicious code in bioql PyPI...
EUVD-2025-11798
Malicious code in bioql PyPI...
EUVD-2023-48201
Malicious code in bioql PyPI...
EUVD-2025-12366
Malicious code in bioql PyPI...
CVE-2024-29318
Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting XSS via upload of a SVG file with embedded javascript code...
CVE-2024-29319
Volmarg Personal Management System 1.4.64 is vulnerable to SSRF Server Side Request Forgery via uploading a SVG file. The server can make unintended HTTP and DNS requests to a server that the attacker controls...