EUVD-2015-1195

Malware in sbrugna...

CVE-2024-46647

eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via uploadfiles...

CVE-2024-46647

eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via uploadfiles...

CVE-2024-46647

The network automation platform eNMS versions 4.4.0 through 4.7.1 is vulnerable to a Directory Traversal vulnerability within the upload_files feature. This flaw allows an attacker to bypass directory restrictions and gain unauthorized access to sensitive files and directories on the system. To m...

Download Manager < 3.1.19 - Authenticated (author+) PHP4 File Upload to RCE

The wpdmadminuploadfile AJAX action used a blacklist approach to forbid potential dangerous files, such as PHP, from being uploaded. However, other dangerous extensions, like .php4 were not forbidden. PoC As an author or any account with the uploadfiles capability, attach a .php4 file to a downlo...

Elementor < 2.9.8 - SVG Sanitizer Bypass leading to Authenticated Stored XSS

Jerome Bruandet, from NinTechNet, discovered a bypass in the SVG sanitizer, which could lead to an authenticated stored XSS issue from users with the uploadfiles capability...

CVE-2008-5695

wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests to update an option, which allows remote authenticated users with manageoptions and uploadfiles capabilities to execute arbitrary code by uploading a PHP script and adding this...