CVE-2025-65675

CVE-2025-65675 Classroomio LMS 0.1.13における格納型クロスサイトスクリプティング（XSS）の脆弱性。認証された攻撃者が細工されたSVGプロフィール画像を介して任意のコードを実行できる可能性があります。発見者 - Rivek Raj Tamang（RivuDon）、インド、シッキム州。 影響を受ける製品: ClassroomIO 影響を受けるバージョン: 0.1.13 発見者: Rivek Raj Tamang（RivuDon）、インド、シッキム州 脆弱性の詳細 格納型クロスサイトスクリプティング 概要 Classroomio LMS バージョン...

User Profile Picture < 2.5.0 - Sensitive Information Disclosure

The REST API endpoint getusers in the User Profile Picture WordPress plugin before 2.5.0 returned more information than was required for its functionality to users with the uploadfiles capability. This included password hashes, hashed user activation keys, usernames, emails, and other less...

Langflow < 1.7.0 - Path Traversal

Langflow 1.7.1 contains a path traversal caused by insufficient filtering of foldername and filename parameters in downloadprofilepicture endpoint, letting attackers read secretkey across directories, exploit requires crafted request. id: CVE-2026-33497 info: name: Langflow 1.7.0 - Path Traversal...

CVE-2025-29017

CVE-2025-29017 - Internet Banking System 2.0.0 通过头像上传实现远程代码执行 描述 Code Astro Internet Banking System 2.0.0 中存在一个远程代码执行（RCE）漏洞，该漏洞源于 pagesviewclient.php 中 profilepic 参数的文件上传验证不严格。攻击者可以通过修改上传请求绕过安全检查，从而实现任意代码执行。 受影响组件 pagesviewclient.php 中的 profilepic 参数 上传功能允许执行恶意 PHP 文件 利用步骤 1...

CVE-2026-47679

GLPI is a free asset and IT management software package. From 10.0.0 until 10.0.26 and 11.0.8, any logged-in GLPI user can exploit insufficient path validation in the profile-picture update flow to request deletion of an attacker-selected file hosted by the server. This issue is fixed in versions...

CVE-2024-52302

CVE-2024-52302: Common-User-Management における無制限ファイルアップロードの脆弱性 概要 私は、動的にユーザーアクセスを制御するように設計されたユーザー管理サービスを備えた堅牢なSpring Bootアプリケーションである common-user-management に、重大なセキュリティ脆弱性を発見しました。この脆弱性は /api/v1/customer/profile-picture エンドポイントに影響し、攻撃者が適切な検証なしにファイルをアップロードできるようにすることで、リモートコード実行 RCE につながる可能性があります。...

CVE-2023-37790

CVE-2023-37790 著者: KaizenSecurity 説明: Jaspersoft Clarity PPM バージョン 14.3.0.298 には、プロフィール画像アップロード機能を介した任意のファイルアップロードの脆弱性が存在することが判明しました。 1. https://nvd.nist.gov/vuln/detail/CVE-2023-37790 2. https://vuldb.com/?id.244831 3. https://debricked.com/vulnerability-database/vulnerability/CVE-2023-37790 4...

CVE-2026-91005

A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. This affects the function moveuploadedfile of the file production/editpicture.php of the component Profile Picture Upload. Performing a manipulation of the argument File results in unrestricted upload. The attack is...

CVE-2026-91005

SourceCodester Online Faculty Clearance System 1.0 is vulnerable to an unrestricted file upload in the Profile Picture Upload component. The flaw resides in the move_uploaded_file function within production/edit_picture.php , where manipulation of the File argument allows an attacker to upload ar...

CVE-2026-91005 SourceCodester Online Faculty Clearance System Profile Picture Upload edit_picture.php move_uploaded_file unrestricted upload

A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. This affects the function moveuploadedfile of the file production/editpicture.php of the component Profile Picture Upload. Performing a manipulation of the argument File results in unrestricted upload. The attack is...

EUVD-2026-78299

A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. This affects the function moveuploadedfile of the file production/editpicture.php of the component Profile Picture Upload. Performing a manipulation of the argument File results in unrestricted upload. The attack is...

CVE-2026-91005: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. This affects the function moveuploadedfile of the file production/editpicture.php of the component Profile Picture Upload. Performing a manipulation of the argument File results in unrestricted upload. The attack is...

CVE-2026-18983: Unrestricted Upload of File with Dangerous Type

The One User Avatar | User Profile Picture plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.5.4 via the wpuaactionprocessoptionupdate function. This is due to insufficient file type validation in wphandleupload called without a MIME...

CVE-2026-64969

ATutor is vulnerable to Insecure Direct Object Reference IDOR attack in profile picture related endpoints. Any authenticated user, including a student, can supply another user's memberid in a POST request to the profile album endpoint and permanently delete that user's profile picture, including...

CVE-2026-64969 Insecure Direct Object Reference in ATutor

ATutor is vulnerable to Insecure Direct Object Reference IDOR attack in profile picture related endpoints. Any authenticated user, including a student, can supply another user's memberid in a POST request to the profile album endpoint and permanently delete that user's profile picture, including...

EUVD-2026-63370

ATutor is vulnerable to Insecure Direct Object Reference IDOR attack in profile picture related endpoints. Any authenticated user, including a student, can supply another user's memberid in a POST request to the profile album endpoint and permanently delete that user's profile picture, including...

CVE-2026-64969 Insecure Direct Object Reference in ATutor

ATutor is vulnerable to Insecure Direct Object Reference IDOR attack in profile picture related endpoints. Any authenticated user, including a student, can supply another user's memberid in a POST request to the profile album endpoint and permanently delete that user's profile picture, including...

CVE-2026-64969

ATutor (last confirmed vulnerable at v2.2.4) has an IDOR flaw in its profile album endpoint: any authenticated user can POST another user's member_id and permanently delete that user's profile picture, including instructors and administrators. The product is no longer supported and unpatched. CVS...

CVE-2026-64969: Authorization Bypass Through User-Controlled Key

ATutor is vulnerable to Insecure Direct Object Reference IDOR attack in profile picture related endpoints. Any authenticated user, including a student, can supply another user's memberid in a POST request to the profile album endpoint and permanently delete that user's profile picture, including...

CVE-2026-54020 Open WebUI: DNS Rebinding SSRF Bypass

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.11.0, Open WebUI resolved a hostname during URL validation and rejected private, loopback, and link-local addresses, but the HTTP clients resolved the hostname again at connection time. An authenticat...