9190 matches found
U.S. Dept Of Defense: Automatic Admin Access
The automatic administrative access vulnerability allowed a user to access the application with full administrative privileges, including the ability to create submissions, manage users, and access sensitive data. The vulnerability impacted the integrity, confidentiality, and availability of the...
springframework: DoS via data binding to multipartFile or servlet part
A flaw was found in Spring Framework. Applications that handle file uploads are vulnerable to a denial of service DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object...
PT-2023-23419 · Bludit · Bludit
Name of the Vulnerable Software and Affected Versions: Bludit version 3.14.1 Description: The issue is related to Stored Cross Site Scripting XSS via an SVG file on the site logo. It's noted that the product's security model trusts users to insert arbitrary content, as they cannot create their ow...
PT-2023-14618 · Algoo · Algoo Tracim
Name of the Vulnerable Software and Affected Versions: Algoo Tracim versions prior to 4.4.2 Description: The issue allows for XSS via HTML file upload. Recommendations: For versions prior to 4.4.2, update to version 4.4.2 or later to resolve the issue...
PT-2023-23492 · Unknown · Sourcecodester Online Computer/Laptop Store
Name of the Vulnerable Software and Affected Versions: Sourcecodester Online Computer and Laptop Store version 1.0 Description: The issue allows unrestricted file upload, which can lead to remote code execution. The vulnerability path is "/classes/Users.php?f=save". Recommendations: For version...
TONGDA Office Anywhere 代码问题漏洞
TONGDA Office Anywhere is a collaborative office OA system. A code issue vulnerability exists in TONGDA Office Anywhere version 11.10, which stems from a problem with the function actionGetdata in the file GatewayController.php, which can lead to unrestricted uploads...
CVE-2022-4774
The Bit Form WordPress plugin before 1.9 does not validate the file types uploaded via it's file upload form field, allowing unauthenticated users to upload arbitrary files types such as PHP or HTML files to the server, leading to Remote Code Execution...
UBUNTU-CVE-2023-29657
eXtplorer 2.1.15 is vulnerable to Insecure Permissions. File upload in file manager allows uploading zip file containing php pages with arbitrary code executions...
eXtplorer 代码问题漏洞
eXtplorer is a PHP-based file manager. A security vulnerability exists in eXtplorer version 2.1.15, which stems from vulnerability to insecure privileges, where the file upload feature in the file manager allows the upload of zip files that contain php pages with arbitrary code execution...
Weaver E-Office 代码问题漏洞
Weaver E-Office is a collaborative office system from China's Panavision Technologies Weaver. A code issue vulnerability exists in Weaver E-Office version 9.5, which stems from a problem with the file /inc/jquery/uploadify/uploadify.php, where manipulation of the parameter Filedata can result in...
PHPOK 代码问题漏洞
PHPOK is an enterprise building system that supports expansion. PHPOK 5.7.140 version of the code problem vulnerability, the vulnerability stems from the existence of a file upload vulnerability, a remote attacker can use this vulnerability through the upload of the produced zip file to run...
Octopus Deploy 资源管理错误漏洞
Octopus Deploy is an automation tool for .NET, Java and other application development and deployment from Octopus Deploy Australia. Octopus Deploy suffers from a security vulnerability that stems from the possibility of uploading zipbomb files as a task that leads to a denial of service...
AgilePoint NX 代码问题漏洞
AgilePoint NX is a cloud-based digital transformation platform from AgilePoint Japan that enables enterprise-grade BPMS with no-code and low-code speed and agility. A security vulnerability exists in AgilePoint NX v8.0 SU2.2 & SU2.3. An attacker exploits the vulnerability to perform an insecure...
PYSEC-2023-61
In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...
Jedox 2020.2.5 Configurable Storage Path Remote Code Execution
Exploit Title: Jedox 2020.2.5 - Remote Code Execution via Configurable Storage Path Date: 28/04/2023 Exploit Author: Team Syslifters / Christoph MAHRL, Aron MOLNAR, Patrick PIRKER and Michael WEDL Vendor Homepage: https://jedox.com Version: Jedox 2020.2 20.2.5 and older CVE : CVE-2022-47878...
Weaver E-Office 代码问题漏洞
Weaver E-Office is a collaborative office system from China's Panmicro Technology Weaver. A code issue vulnerability exists in Weaver E-Office version 9.5, which stems from the presence of an unknown function in App/Ajax/ajax.php?action=mobileuploadsave, which leads to unrestricted uploads via th...
python-django: Potential denial-of-service vulnerability in file uploads
A memory exhaustion flaw was found in the python-django package. This issue occurs when passing certain inputs, leading to a system crash and denial of service...
python-django: Potential denial-of-service vulnerability in file uploads
A memory exhaustion flaw was found in the python-django package. This issue occurs when passing certain inputs, leading to a system crash and denial of service...
UBUNTU-CVE-2023-31047
In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...