CVE-2026-64949: Unrestricted Upload of File with Dangerous Type

Incomplete extension blacklist in the File Manager module allows authenticated upload and execution of arbitrary .phar files. Affects Pandora FMS from 777 onwards...

CVE-2023-53889

Perch CMS 3.2 contains a remote code execution vulnerability that allows authenticated administrators to upload arbitrary PHP files through the assets management interface. Attackers can upload a malicious .phar file with embedded system command execution capabilities to execute arbitrary command...

EUVD-2018-3360

Malware in sbrugna...

EUVD-2022-2108

Malicious code in bioql PyPI...