EUVD-2024-26440

Malicious code in bioql PyPI...

CVE-2025-2687

CVE-2025-2687 affects PHPGurukul eLearning System 1.0. The vulnerable component is the Image Handler, specifically the file /user/index.php, where an unspecified function handling images allows an unrestricted upload. The vulnerability can be triggered remotely and exploitation has been publicly ...

CVE-2024-29434

An issue in the system image upload interface of Alldata v0.4.6 allows attackers to execute a directory traversal when uploading a file...

CVE-2024-29434

The Alldata software (version v0.4.6 ) contains a directory traversal vulnerability within its system image upload interface . An attacker can exploit this flaw during the file upload process to access or modify files outside the intended directory. This could lead to unauthorized data access or ...

PT-2024-22894 · Alldata · Alldata

Name of the Vulnerable Software and Affected Versions: Alldata version 0.4.6 Description: The issue in the system image upload interface allows attackers to execute a directory traversal when uploading a file. This enables them to access or modify files outside the intended directory, potentially...

CVE-2024-29434: Improper Limitation of a Pathname to a Restricted Directory

An issue in the system image upload interface of Alldata v0.4.6 allows attackers to execute a directory traversal when uploading a file...

CVE-2024-29434

An issue in the system image upload interface of Alldata v0.4.6 allows attackers to execute a directory traversal when uploading a file...