mySCADA myPRO 代码问题漏洞

mySCADA myPRO is a software application. myPRO is a professional HMI/SCADA system designed primarily for the visualization and control of industrial processes. A code issue vulnerability exists in mySCADA myPRO that allows an unauthenticated, remote attacker to upload arbitrary files to the file...

Monstra CMS 3.0.4 - Remote Code Execution (Authenticated) Exploit

Exploit Title: Monstra CMS 3.0.4 - Remote Code Execution Authenticated Exploit Author: Ron Jost hacker5preme Vendor Homepage: https://monstra.org/ Software Link: https://monstra.org/monstra-3.0.4.zip Version: 3.0.4 Tested on: Ubuntu 20.04 CVE: CVE-2018-6383 Documentation:...

CVE-2020-23370

In YzmCMS 5.6, stored XSS exists via the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter, which allows remote attackers to upload a swf file. The swf file can be injected with arbitrary web script or HTML...

CVE-2021-26804

Insecure Permissions in Centreon Web versions 19.10.18, 20.04.8, and 20.10.2 allows remote attackers to bypass validation by changing any file extension to ".gif", then uploading it in the "Administration/ Parameters/ Images" section of the application...

Sonicwall SonicWall Email Security Appliance 代码问题漏洞

SonicWall Email Security is an EMAIL protection device. A security vulnerability exists in SonicWall Email Security that could be exploited by remote attackers to submit a special request to upload arbitrary files to the system...

The vulnerability of the API interface of the virtual infrastructure monitoring tool vRealize Operations allows a attacker to upload malicious files.

The vulnerability of the API interface of the virtual infrastructure monitoring tool vRealize Operations is related to the unlimited loading of malicious files. Exploiting this vulnerability allows a remote attacker to upload malicious files...

CVE-2021-3395

A cross-site scripting XSS vulnerability in Pryaniki 6.44.3 allows remote authenticated users to upload an arbitrary file. The JavaScript code will execute when someone visits the attachment...

VulnCheck KEV: CVE-2019-8394

Zoho ManageEngine ServiceDesk Plus SDP contains an unspecified vulnerability that allows remote users to upload files via login page customization...

CVE-2020-28688

The add artwork functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upload arbitrary files...

Wordpress EZ-done File Manager Remote File Upload Vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. A remote file upload vulnerability exists in Wordpress EZ-done File Manager. An attacker ca...

The vulnerability of the `kubectl cp` command, a management tool for clusters of virtual machines in Kubernetes, allows a attacker to upload a malicious file.

The vulnerability of the kubectl cp command, a management tool for clusters of virtual machines in Kubernetes, is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability allows a malicious actor to download a malicious file remotely...

CVE-2020-12840

ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload sound files via /index.php...

CVE-2020-25213

The File Manager wp-file-manager plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php extension. This, for example, allows attackers to run the elFinder upload or mkfile and p...

CVE-2020-14066

IceWarp Email Server 12.3.0.1 allows remote attackers to upload JavaScript files that are dangerous for clients to access...

The vulnerability of Web containers in Netweaver Application Server Java applications relates to the unlimited loading of dangerous files, allowing attackers to upload malicious files.

The vulnerability of Web containers in Netweaver Application Server Java applications is related to the unlimited loading of malicious files. Exploiting this vulnerability allows a malicious actor to remotely upload malicious files...

The vulnerability of the solr.in.sh component of the Apache Solr search server allows attackers to upload malicious files.

The vulnerability of the solr.in.sh component of the Apache Solr search server is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to upload malicious files through the RMI PORT remotely...

CVE-2019-15032

Pydio 6.0.8 mishandles error reporting when a directory allows unauthenticated uploads, and the remote-upload option is used with the http://localhost:22 URL. The attacker can obtain sensitive information such as the name of the user who created that directory and other internal server informatio...

CVE-2019-15032

Pydio 6.0.8 mishandles error reporting when a directory allows unauthenticated uploads, and the remote-upload option is used with the http://localhost:22 URL. The attacker can obtain sensitive information such as the name of the user who created that directory and other internal server informatio...

CVE-2019-15314

tiki/tiki-uploadfile.php in Tiki 18.4 allows remote attackers to upload JavaScript code that is executed upon visiting a tiki/tiki-downloadfile.php?display&fileId= URI...

HPE 3PAR Service Processor Remote Arbitrary File Upload Vulnerability

HPE 3PAR Service Processor SP is a suite of virtual service processors deployed on the VMware vSphere hypervisor from HPE in the United States. A remote arbitrary file upload vulnerability exists in HPE 3PAR Service Processor versions prior to 5.0.5.1. No detailed vulnerability details are...