DaiCuo CMS 安全漏洞

DaiCuo CMS is a PHP news article management system by DaiCuo individual developer. A security vulnerability exists in DaiCuo CMS version V1.3.13, which originates from an arbitrary file upload vulnerability in the image upload function...

CVE-2025-11908

A security flaw has been discovered in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. The affected element is the function uploadFile of the file /FileDir.do?Action=Upload. Performing manipulation of the argument File results in unrestricted upload. The attack is possible to be carried out...

CVE-2025-11908

A security flaw has been discovered in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. The affected element is the function uploadFile of the file /FileDir.do?Action=Upload. Performing manipulation of the argument File results in unrestricted upload. The attack is possible to be carried out...

CVE-2025-11908

A security flaw has been discovered in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. The affected element is the function uploadFile of the file /FileDir.do?Action=Upload. Performing manipulation of the argument File results in unrestricted upload. The attack is possible to be carried out...

CVE-2025-11607

A weakness has been identified in harry0703 MoneyPrinterTurbo up to 1.2.6. The impacted element is the function uploadmusic of the file app/controllers/v1/music.py of the component API Endpoint. Executing a manipulation of the argument File can lead to path traversal. The attack may be performed...

EUVD-2017-14706

Malware in sbrugna...

EUVD-2020-19052

Malware in sbrugna...

EUVD-2020-10188

Malware in sbrugna...

EUVD-2020-1473

Malware in sbrugna...

EUVD-2018-21442

Malware in sbrugna...

EUVD-2021-25966

Malware in sbrugna...

EUVD-2025-32423

The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 9.0.11.006 due to insufficient input sanitization and output escaping in the wppauserupload function. This makes it possible for authenticated attackers, with Subscriber-level...

EUVD-2022-7618

Malicious code in bioql PyPI...

EUVD-2023-0296

Malicious code in bioql PyPI...

EUVD-2022-32398

Malicious code in bioql PyPI...

EUVD-2022-35228

Malicious code in bioql PyPI...

EUVD-2022-31173

Malicious code in bioql PyPI...

EUVD-2025-12366

Malicious code in bioql PyPI...

EUVD-2025-25433

Malicious code in bioql PyPI...

EUVD-2024-52654

Malicious code in bioql PyPI...