5 matches found
PT-2026-23103
Name of the Vulnerable Software and Affected Versions File Browser versions prior to 2.61.1 Description File Browser includes a file managing interface that allows users to upload, delete, preview, rename, and edit files within a specified directory. A broken access control issue exists in the TU...
CVE-2025-9978 Jeg Elementor Kit < 2.7.0 - Author+ Stored XSS
The Jeg Kit for Elementor WordPress plugin before 2.7.0 does not sanitize SVG file contents when uploaded via xmlrpc.php, leading to a cross site scripting vulnerability...
CVE-2018-15379
A vulnerability in which the HTTP web server for Cisco Prime Infrastructure PI has unrestricted directory permissions could allow an unauthenticated, remote attacker to upload an arbitrary file. This file could allow the attacker to execute commands at the privilege level of the user prime. This...
CVE-2018-7665
An issue was discovered in ClipBucket before 4.0.0 Release 4902. A malicious file can be uploaded via the name parameter to actions/beatsuploader.php or actions/photouploader.php, or the coverPhoto parameter to editaccount.php...
JonDo 00.15.004 IP changer with Bitcoin, connection manipulation protection and higher efficiency
JonDo 00.15.004 IP changer with Bitcoin, connection manipulation protection and higher efficiency JonDos publishes a new version of the JonDo-Software, an IP changer and IP anonymization program, that you can use for anonymous surfing in the Internet with high security anonymous proxy servers. Wh...