EUVD-2023-23684

Malicious code in bioql PyPI...

EUVD-2025-22018

Malicious code in bioql PyPI...

EUVD-2025-21275

Malicious code in bioql PyPI...

EUVD-2025-9064

Malicious code in bioql PyPI...

EUVD-2025-28822

Malicious code in bioql PyPI...

EUVD-2024-49828

Malicious code in bioql PyPI...

EUVD-2024-23290

Malicious code in bioql PyPI...

EUVD-2025-1778

Malicious code in bioql PyPI...

EUVD-2025-28844

Malicious code in bioql PyPI...

CVE-2025-11078 itsourcecode Open Source Job Portal controller.php unrestricted upload

A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/controller.php?action=photos. The manipulation of the argument photo leads to unrestricted upload. The attack is possible to be carried out...

PT-2025-39745

Name of the Vulnerable Software and Affected Versions itsourcecode Open Source Job Portal version 1.0 Description A flaw exists in itsourcecode Open Source Job Portal 1.0 that allows for unrestricted file uploads. This is due to the manipulation of the photo argument within the file...

CVE-2025-10741

A security vulnerability has been detected in Selleo Mentingo up to 2025.08.27. The affected element is an unknown function of the component Profile Picture Handler. The manipulation of the argument userAvatar leads to unrestricted upload. The attack is possible to be carried out remotely. The...

CVE-2025-10763

A vulnerability was determined in academico-sis academico up to d9a9e2636fbf7e5845ee086bcb03ca62faceb6ab. Affected by this issue is some unknown functionality of the file /edit-photo of the component Profile Picture Handler. This manipulation causes unrestricted upload. The attack is possible to ...

Academico 代码问题漏洞

Academico is a Lavarel-based elementary and middle school school management platform from Academico Open Source. Academico has a code issue vulnerability that stems from a missing upload restriction in the file/edit-photo function, which could lead to a remote upload attack...

PT-2025-38667

Name of the Vulnerable Software and Affected Versions CosmodiumCS OnlyRAT versions prior to 3.3 Description A vulnerability exists in CosmodiumCS OnlyRAT. The connect/remote upload/remote download function within the main.py file of the Configuration File Handler component is affected. Manipulati...

CVE-2025-10755 Selleo Mentingo Content-Type unrestricted upload

A vulnerability was detected in Selleo Mentingo 2025.08.27. The impacted element is an unknown function of the component Content-Type Handler. The manipulation of the argument userAvatar results in unrestricted upload. The attack may be performed from remote. The exploit is now public and may be...

CVE-2025-10755

CVE-2025-10755 affects Selleo Mentingo 2025.08.27, with the vulnerable component in the Content-Type Handler. The issue arises from manipulation of the argument userAvatar , leading to unrestricted file uploads. The attack is described as remote and publicly exploitable; multiple sources cite a p...

CVE-2025-10741

A security vulnerability has been detected in Selleo Mentingo up to 2025.08.27. The affected element is an unknown function of the component Profile Picture Handler. The manipulation of the argument userAvatar leads to unrestricted upload. The attack is possible to be carried out remotely. The...

PT-2025-38639

Name of the Vulnerable Software and Affected Versions Selleo Mentingo version 2025.08.27 Description A vulnerability exists in Selleo Mentingo 2025.08.27 within the Content-Type Handler component. Manipulation of the userAvatar argument results in unrestricted upload, and the attack can be...

PT-2025-38637

Name of the Vulnerable Software and Affected Versions Selleo Mentingo versions prior to 2025.08.28 Description A security issue has been identified in Selleo Mentingo. The vulnerability resides in an unknown function within the Profile Picture Handler component. Manipulation of the userAvatar...