GHSA-3RF6-X59V-5JFV dash-uploader has a directory traversal vulnerability

Impact An unauthenticated path traversal vulnerability exists in dash-uploader versions 0.1.0 through 0.7.0a2. The library's HTTP request handler at dashuploader/httprequesthandler.py reads three form parameters uploadid, resumableFilename, resumableIdentifier from request.form.get and passes the...

EUVD-2007-0127

Malware in sbrugna...

EUVD-2025-23913

Malicious code in bioql PyPI...

SAP NetWeaver Visual Composer Metadata Uploader code-related vulnerabilities

SAP NetWeaver Visual Composer Metadata Uploader is a tool for modeling assistance from SAP. A file upload vulnerability exists in SAP NetWeaver Visual Composer Metadata Uploader. The vulnerability is due to an unauthenticated agent uploading potentially malicious executable binaries because the...

VulnCheck KEV: CVE-2021-30118

An attacker can upload files with the privilege of the Web Server process for Kaseya VSA Unified Remote Monitoring & Management RMM 9.5.4.2149 and subsequently use these files to execute asp commands The api /SystemTab/uploader.aspx is vulnerable to an unauthenticated arbitrary file upload leadin...

CVE-2023-39115

install/aiz-uploader/upload in Campcodes Online Matrimonial Website System Script 3.3 allows XSS via a crafted SVG document...

EUVD-2021-21274

A vulnerability in the file uploader component found in the /src/Classes/FileUploader.php file of the ProfilePress WordPress plugin made it possible for users to upload arbitrary files during user registration or during profile updates. This issue affects versions 3.0.0 - 3.1.3...

PT-2021-17175 · Discord · Probot

Name of the Vulnerable Software and Affected Versions: ProBot bot through 2021-02-08 for Discord Description: The issue allows attackers to interfere with the intended purpose of the "Send an image when a user joins the server" feature, or possibly have unspecified other impact, because the...

CVE-2020-15649

Given an installed malicious file picker application, an attacker was able to steal and upload local files of their choosing, regardless of the actually files picked. Note: This issue only affected Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox ES...

CSRF vulnerability and missing permission checks in fortify-on-demand-uploader

fortify-on-demand-uploader 5.0.1 and earlier does not perform permission checks on a method implementing form validation. This allows users with Overall/Read access to Jenkins to connect to the globally configured Fortify on Demand endpoint using attacker-specified credentials IDs obtained throug...

LightSpeed - Valums Uploader Shell Upload Exploit

The lightspeed WordPress theme was affected by a Valums Uploader Shell Upload Exploit security vulnerability...

Uploader v0.1.5 Multiple Vulnerabilities

Exploit for php platform in category web applications ======================================== Uploader v0.1.5 Multiple Vulnerabilities ======================================== ======================================================================================== | Title : Uploader 0.1.5 Mullti...

Image-Uploader Shell Upload Vulnerability

Exploit for php platform in category web applications ========================================= Image-Uploader Shell Upload Vulnerability ========================================= Author: Mr.MLL Published: 2010-04-17 Verified: yes Download Exploit Code Download N/A ========= Software :...

Maian Uploader v4.0 Shell Upload Vulnerability

Exploit for unknown platform in category web applications ============================================== Maian Uploader v4.0 Shell Upload Vulnerability ============================================== ======================================================================================== | Title :...

Uploader by CeleronDude 5.3.0 - Arbitrary File Upload (2)

Uploader by CeleronDude 5.3.0 - Arbitrary File Upload 2 Uploader by CeleronDude 5.3.0 - Upload Vulnerability Discovered by : Stink' Date : 2009-12-17 for upload. 2010-01-17 for Settings.db retrieve password. Dork : "Uploader by CeleronDude." Website Publisher :...

Dren's PHP Uploader Remote File Upload Vulnerability

No description provided by source. Dren's PHP Uploader Remote File Upload Vulnerability + Author : Cyb3r IntRue +Email : [email protected]:[email protected] & [email protected]:[email protected] + Date : 29/12/2009 + Software Link : http://freewebtown.com/thanigga/Dren's%20PHP%20Uploader.rar + Team :...

PHP Uploader Downloader 2.0 - Arbitrary File Upload

PHP Uploader Downloader 2.0 - Arbitrary File Upload ======================================================================================== | Title : PHP Uploader Downloader Upload Shell Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum ...

Flashden Multiple File Uploader Shell Upload Vulnerability

Exploit for unknown platform in category web applications ========================================================== Flashden Multiple File Uploader Shell Upload Vulnerability ========================================================== Exploit Title: Flashden Shell Upload Vulnerability Date:...

Max's File Uploader File Upload Vulnerability

Max's File Uploader File Upload Vulnerability Homepage: http://www.phpf1.com/ Download: http://www.phpf1.com/download.html?item=9 Dork: intitle:"Max's File Uploader" maybe ^^ Found by : Xcross87 | xcross87.info | hcegroup.net Simply upload a shell .php, it will be stored in the same level. Exampl...

uberupload.txt

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ | |Uber Uploader 4.2 Arbitrary File Upload Vulnerability |Gamma Security Team |www.nullak.com |www.gammahack.com |Discovered:Null |Official Site:http://sourceforge.net/projects/uber-uploader |Download...