923 matches found
CVE-2020-36863: Unrestricted Upload of File with Dangerous Type
Nagios XI versions prior to 5.7.2 allow PHP files to be uploaded to the Audio Import directory and executed from that location. The upload handler did not properly restrict file types or enforce storage outside of the webroot, and the web server permitted execution within the upload directory. An...
CVE-2025-60500
QDocs Smart School Management System 7.1 allows authenticated users with roles such as "accountant" or "admin" to bypass file type restrictions in the media upload feature by abusing the alternate YouTube URL option. This logic flaw permits uploading of arbitrary PHP files, which are stored in a...
CVE-2025-60500
QDocs Smart School Management System 7.1 is vulnerable to a logic flaw in its media upload feature, specifically within the Download Center > Upload Share Content component. Authenticated users with roles such as accountant , admin , or superadmin can bypass file type restrictions by exploitin...
CVE-2025-11722 Category and Products Accordion Panel <= 1.0 - Authenticated (Contributor+) Local File Inclusion
The Woocommerce Category and Products Accordion Panel plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0 via the 'categoryaccordionpanel' shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to...
EUVD-2007-0890
Malware in sbrugna...
EUVD-2007-2177
Malware in sbrugna...
EUVD-2006-6321
Malware in sbrugna...
EUVD-2020-10050
Malware in sbrugna...
EUVD-2012-1009
Malware in sbrugna...
EUVD-2007-4592
Malware in sbrugna...
EUVD-2005-4444
Malware in sbrugna...
EUVD-2011-4266
Malware in sbrugna...
EUVD-2008-1497
Malware in sbrugna...
EUVD-2008-1784
Malware in sbrugna...
EUVD-2006-3931
Malware in sbrugna...
EUVD-2011-3702
Malware in sbrugna...
EUVD-2011-3673
Malware in sbrugna...
EUVD-2011-3695
Malware in sbrugna...