CVE-2025-11607

A weakness has been identified in harry0703 MoneyPrinterTurbo up to 1.2.6. The impacted element is the function uploadmusic of the file app/controllers/v1/music.py of the component API Endpoint. Executing a manipulation of the argument File can lead to path traversal. The attack may be performed...

EUVD-2021-25966

Malware in sbrugna...

EUVD-2020-19052

Malware in sbrugna...

EUVD-2020-1473

Malware in sbrugna...

EUVD-2020-10188

Malware in sbrugna...

EUVD-2017-14706

Malware in sbrugna...

EUVD-2018-21442

Malware in sbrugna...

EUVD-2025-32423

The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 9.0.11.006 due to insufficient input sanitization and output escaping in the wppauserupload function. This makes it possible for authenticated attackers, with Subscriber-level...

EUVD-2022-31173

Malicious code in bioql PyPI...

EUVD-2022-7618

Malicious code in bioql PyPI...

EUVD-2022-35228

Malicious code in bioql PyPI...

EUVD-2022-32398

Malicious code in bioql PyPI...

EUVD-2024-52654

Malicious code in bioql PyPI...

EUVD-2023-0296

Malicious code in bioql PyPI...

EUVD-2025-12366

Malicious code in bioql PyPI...

EUVD-2025-25433

Malicious code in bioql PyPI...

EUVD-2025-32247

The WP Dispatcher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the wpdispatcherprocessupload function in all versions up to, and including, 1.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

CVE-2025-10058

The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the uploadfunction function in all versions up to, and including, 7.27. This makes it possible for authenticated attackers, with...

CVE-2025-10058 WP Import – Ultimate CSV XML Importer for WordPress <= 7.27 - Authenticated (Subscriber+) Arbitrary File Deletion

The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the uploadfunction function in all versions up to, and including, 7.27. This makes it possible for authenticated attackers, with...

CVE-2025-55383

Moss before v0.15 has a file upload vulnerability. The "upload" function configuration allows attackers to upload files of any extension to any location on the target server...