EUVD-2024-26440

Malicious code in bioql PyPI...

CVE-2025-2687

CVE-2025-2687 affects PHPGurukul eLearning System 1.0. The vulnerable component is the Image Handler, specifically the file /user/index.php, where an unspecified function handling images allows an unrestricted upload. The vulnerability can be triggered remotely and exploitation has been publicly ...

CVE-2024-29434

An issue in the system image upload interface of Alldata v0.4.6 allows attackers to execute a directory traversal when uploading a file...

CVE-2024-29434

The CVE-2024-29434 affects Alldata v0.4.6, where the system image upload interface is vulnerable to directory traversal during file upload. The issue is documented across multiple sources (NVD/Red Hat/PTSecurity/CNNVD/CVE list) with a high impact (C:H/I:H) and low attack complexity, requiring low...

PT-2024-22894 · Alldata · Alldata

Name of the Vulnerable Software and Affected Versions: Alldata version 0.4.6 Description: The issue in the system image upload interface allows attackers to execute a directory traversal when uploading a file. This enables them to access or modify files outside the intended directory, potentially...

CVE-2024-29434

An issue in the system image upload interface of Alldata v0.4.6 allows attackers to execute a directory traversal when uploading a file...