EUVD-2023-45519

Malicious code in bioql PyPI...

CVE-2025-1555

A vulnerability classified as critical was found in hzmanyun Education and Training System 3.1.1. This vulnerability affects the function saveImage. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the publ...

CVE-2025-1555 hzmanyun Education and Training System saveImage unrestricted upload

A vulnerability classified as critical was found in hzmanyun Education and Training System 3.1.1. This vulnerability affects the function saveImage. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the publ...

PT-2025-7529

Name of the Vulnerable Software and Affected Versions hzmanyun Education and Training System version 3.1.1 Description A critical vulnerability was found in the hzmanyun Education and Training System, affecting the saveImage function. The manipulation of the file argument leads to unrestricted...

CVE-2023-40980

File Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file...

CVE-2023-40980

File Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file...

DWSurvey Code Issue Vulnerability

DWSurvey is a questionnaire system written in Java. A security vulnerability exists in DWSurvey v.3.2.0 and earlier versions, which stems from a file upload vulnerability that allows remote attackers to execute arbitrary code via the saveimage and savveFile methods in the action/UploadAction.java...

PT-2023-27728 · Dwsurvey · Dwsurvey

Name of the Vulnerable Software and Affected Versions: DWSurvey DWSurvey-OSS versions 3.2.0 and earlier Description: The issue allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file. This enables the attacker to upload...

TEC-IT TBarCode - OCX ActiveX Arbitrary File Overwrite

TEC-IT TBarCode - OCX ActiveX Arbitrary File Overwrite ----------------------------------------------------------------------------------------------------------------- TEC-IT TBarCode OCX ActiveX Control TBarCode7.ocx v. 7.0.2.3524 "SaveImage" Remote Arbitrary File Overwrite url:...