Lucene search
K

8 matches found

CVE
CVE
added 2025/01/08 10:31 p.m.45 views

CVE-2024-13191

CVE-2024-13191 affects ZeroWdd myblog 1.0, specifically the upload function in src/main/java/com/wdd/myblog/controller/admin/uploadController.java. The root cause is manipulation of the file argument, resulting in unrestricted uploads. The vulnerability is exploitable remotely and, per sources, t...

9.8CVSS6.5AI score0.00102EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/01/08 10:31 p.m.11 views

CVE-2024-13191 ZeroWdd myblog uploadController.java upload unrestricted upload

A vulnerability, which was classified as critical, has been found in ZeroWdd myblog 1.0. This issue affects the function upload of the file src/main/java/com/wdd/myblog/controller/admin/uploadController.java. The manipulation of the argument file leads to unrestricted upload. The attack may be...

6.5CVSS0.00102EPSS
Exploits1References5
CVE
CVE
added 2025/01/06 12:31 a.m.45 views

CVE-2024-13145

CVE-2024-13145 affects zhenfeng13 My-Blog 1.0. The vulnerability lies in the upload function (src/main/java/com/site/blog/my/core/controller/admin/uploadController.java): manipulation of the file parameter leads to unrestricted file upload. This enables remote exploitation. Multiple connected sou...

9.8CVSS6.6AI score0.00102EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/06 12:31 a.m.8 views

CVE-2024-13145 zhenfeng13 My-Blog uploadController. java upload unrestricted upload

A vulnerability classified as critical was found in zhenfeng13 My-Blog 1.0. Affected by this vulnerability is the function upload of the file src/main/java/com/site/blog/my/core/controller/admin/uploadController. java. The manipulation of the argument file leads to unrestricted upload. The attack...

6.5CVSS6.7AI score0.00102EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/02/20 12:0 a.m.2 views

Timo Security Breach

Timo is a backend management system for auntvt individual developers. A security vulnerability exists in Timo version v.2.0.3, which originated from a vulnerability that allows remote attackers to execute arbitrary code via a file type restriction in the UploadController.java component...

9.8CVSS7.8AI score0.03561EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/02/20 12:0 a.m.14 views

CVE-2024-22824

An issue in Timo v.2.0.3 allows a remote attacker to execute arbitrary code via the filetype restrictions in the UploadController.java component...

7.8AI score0.03561EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/02/20 12:0 a.m.10 views

CVE-2024-22824

An issue in Timo v.2.0.3 allows a remote attacker to execute arbitrary code via the filetype restrictions in the UploadController.java component...

7.9AI score0.03561EPSS
Exploits1References1
CVE
CVE
added 2024/02/20 12:0 a.m.1393 views

CVE-2024-22824

CVE-2024-22824 affects Timo v2.0.3. The issue enables remote code execution via the filetype restrictions in UploadController.java, with CVSS 3.1 base score 9.8 (CRITICAL, NETWORK, HIGH impact on confidentiality, integrity, and availability). Red Hat and PRION/NVD/CNNVD entries corroborate the co...

9.8CVSS7.8AI score0.03561EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder