CVE-2025-8504 code-projects Kitchen Treasure userregistration.php unrestricted upload

A vulnerability, which was classified as critical, was found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-8504

CVE-2025-8504 affects code-projects Kitchen Treasure 1.0. The vulnerability is in an unknown part of /userregistration.php where manipulating the photo parameter leads to unrestricted file upload, and exploitation can be performed remotely. Multiple sources (NVD/NVD-affiliate feeds, Red Hat, CVE ...

Code-Projects Kitchen Treasure 代码问题漏洞

Code-Projects Kitchen Treasure is an open source kitchen software from Code-Projects. A code issue vulnerability exists in Code-Projects Kitchen Treasure version 1.0, which stems from the incorrect manipulation of the parameter photo in the file /userregistration.php resulting in unlimited upload...

CVE-2025-8504: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, was found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has...

PT-2025-31778 · Code Projects · Kitchen Treasure

Name of the Vulnerable Software and Affected Versions: code-projects Kitchen Treasure version 1.0 Description: A critical vulnerability exists in code-projects Kitchen Treasure. The issue affects an unknown part of the file /userregistration.php. Manipulation of the photo argument leads to...

CVE-2025-8437

A vulnerability classified as critical has been found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2025-8437

A vulnerability classified as critical has been found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2025-8437 code-projects Kitchen Treasure userregistration.php sql injection

A vulnerability classified as critical has been found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2025-8437 code-projects Kitchen Treasure userregistration.php sql injection

A vulnerability classified as critical has been found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2025-8437

CVE-2025-8437 affects code-projects Kitchen Treasure 1.0, with the vulnerability located in an unknown part of /userregistration.php. The issue is an SQL injection via the email parameter that can be triggered remotely, and the exploit has been publicly disclosed. Connected documents corroborate ...

CVE-2025-8437: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

PT-2025-31617 · Code Projects · Kitchen Treasure

Name of the Vulnerable Software and Affected Versions: code-projects Kitchen Treasure version 1.0 Description: A critical vulnerability exists in code-projects Kitchen Treasure 1.0. The issue is located in an unknown part of the file /userregistration.php and involves SQL injection. The...

Code-Projects Kitchen Treasure 注入漏洞

Code-Projects Kitchen Treasure is an open source kitchen software from Code-Projects. An injection vulnerability exists in code-projects Kitchen Treasure version 1.0, which results from SQL injection due to incorrect manipulation of the parameter email in the file /userregistration.php...

PT-2024-17782 · Unknown · Treasurehuntgame Treasurehunt

Name of the Vulnerable Software and Affected Versions: TreasureHuntGame TreasureHunt up to 963e0e0 Description: A critical vulnerability has been found in TreasureHuntGame TreasureHunt. The issue affects the console log function of the file TreasureHunt/checkflag.php. The manipulation of the...

Malicious code in down_load_ebook_como_elaborar_cerveza_casera_by_knowledge_treasure_collection_rqwqo (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2161 Malicious code in down_load_ebook_como_elaborar_cerveza_casera_by_knowledge_treasure_collection_rqwqo (npm)

--- -= Per source details. Do not edit below this line.=-...

BIT-FLUENT-BIT-2021-46878

An issue was discovered in Treasure Data Fluent Bit 1.7.1, erroneous parsing in flbpackmsgpacktojsonformat leads to type confusion bug that interprets whatever is on the stack as msgpack maps and arrays, leading to use-after-free. This can be used by an attacker to craft a specially craft file an...

BIT-FLUENT-BIT-2021-46879

An issue was discovered in Treasure Data Fluent Bit 1.7.1, a wrong variable is used to get the msgpack data resulting in a heap overflow in flbmsgpackgelfvalueext. An attacker can craft a malicious file and tick the victim to open the file with the software, triggering a heap overflow and execute...

GHSA-5MP4-32RR-V3X5 Absolute path traversal vulnerability in digdag server

Summary Treasure Data's digdag workload automation system is susceptible to a path traversal vulnerability if it's configured to store log files locally. Impact This issue may lead to Information Disclosure...

CVE-2024-25125 Absolute path traversal vulnerability in digdag server

Digdag is an open source tool that to build, run, schedule, and monitor complex pipelines of tasks across various platforms. Treasure Data's digdag workload automation system is susceptible to a path traversal vulnerability if it's configured to store log files locally. This issue may lead to...