6 matches found
EUVD-2023-1159
Malicious code in bioql PyPI...
CVE-2023-0265
Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers...
PT-2024-13240 · WordPress · My Account Page Editor
Name of the Vulnerable Software and Affected Versions: My Account Page Editor WordPress plugin versions prior to 1.3.2 Description: The issue allows any authenticated users to upload arbitrary files to the server, leading to remote code execution RCE. This is due to the lack of validation for the...
CVE-2023-0265
Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers...
Uvdesk 代码问题漏洞
Uvdesk is a complete ticket support system open-sourced by Uvdesk India. A security vulnerability exists in Uvdesk version 1.1.1, which stems from the program not properly validating the profile picture uploaded by the customer, which can be exploited by an attacker to execute commands on the...
CVE-2023-0265
Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers...