3 matches found
EUVD-2025-27500
Malicious code in bioql PyPI...
CVE-2025-34163 Dongsheng Logistics Software Unauthenticated Arbitrary File Upload
Dongsheng Logistics Software exposes an unauthenticated endpoint at /CommMng/Print/UploadMailFile that fails to enforce proper file type validation and access control. An attacker can upload arbitrary files, including executable scripts such as .ashx, via a crafted multipart/form-data POST reques...
PT-2025-12067
Name of the Vulnerable Software and Affected Versions Invoke-AI server version v5.0.1 Description A Denial of Service DoS issue exists in the multipart request boundary processing mechanism, allowing unauthenticated attackers to cause excessive resource consumption by appending excessive characte...