EUVD-2023-1159

Malicious code in bioql PyPI...

EUVD-2024-16698

Malicious code in bioql PyPI...

EUVD-2023-42888

Malicious code in bioql PyPI...

EUVD-2023-1300

Malicious code in bioql PyPI...

EUVD-2024-1099

Malicious code in bioql PyPI...

EUVD-2023-1033

Malicious code in bioql PyPI...

EUVD-2023-41517

Malicious code in bioql PyPI...

CVE-2023-39147

An arbitrary file upload vulnerability in Uvdesk 1.1.3 allows attackers to execute arbitrary code via uploading a crafted image file...

CVE-2023-37635

UVDesk Community Skeleton v1.1.1 allows unauthenticated attackers to perform brute force attacks on the login page to gain access to the application...

CVE-2023-1197

Cross-site Scripting XSS - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0...

CVE-2023-0265

Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers...

CVE-2024-3137

Improper Privilege Management in uvdesk/community-skeleton...

Remote Code Execution

uvdesk/core-framework is vulnerable to Remote Code Execution. This vulnerability is due to insufficient input validation, allowing attackers to upload malicious files which result in Remote Code Execution...

CVE-2024-0916

Unauthenticated file upload allows remote code execution. This issue affects UvDesk Community: from 1.0.0 through 1.1.3...

CVE-2024-0916

Unauthenticated file upload allows remote code execution. This issue affects UvDesk Community: from 1.0.0 through 1.1.3...

CVE-2024-0916

CVE-2024-0916 affects UVdesk Community (1.0.0–1.1.3) and is due to insufficient input validation that allows unauthenticated file uploads leading to Remote Code Execution (RCE). Public sources describe the vulnerability as an unauthenticated file upload enabling code execution, with references no...

CVE-2024-0916 Unauthenticated Remote Code Execution in UvDesk Community

Unauthenticated file upload allows remote code execution. This issue affects UvDesk Community: from 1.0.0 through 1.1.3...

CVE-2024-0916 Unauthenticated Remote Code Execution in UvDesk Community

Unauthenticated file upload allows remote code execution. This issue affects UvDesk Community: from 1.0.0 through 1.1.3...

PT-2024-15917 · Unknown · Uvdesk Community

Name of the Vulnerable Software and Affected Versions: UvDesk Community versions 1.0.0 through 1.1.3 Description: Unauthenticated file upload allows remote code execution. Recommendations: For UvDesk Community versions 1.0.0 through 1.1.3, consider disabling the file upload feature until a patch ...

Uvdesk 安全漏洞

Uvdesk is a complete ticket support system open-sourced by Uvdesk India. A security vulnerability exists in UvDesk versions 1.0.0 through 1.1.3 that stems from an unauthenticated file upload allowing remote code execution...