Lucene search
+L

2746 matches found

RedhatCVE
RedhatCVE
•added 2025/02/05 3:20 a.m.•17 views

CVE-2024-51793

Unrestricted Upload of File with Dangerous Type vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Upload a Web Shell to a Web Server.This issue affects RepairBuddy: from n/a through = 3.8115...

10CVSS7.2AI score0.0183EPSS
SaveExploits4References1
RedhatCVE
RedhatCVE
•added 2025/02/05 3:19 a.m.•20 views

CVE-2024-51790

Unrestricted Upload of File with Dangerous Type vulnerability in HB WEBSOL HB AUDIO GALLERY hb-audio-gallery allows Upload a Web Shell to a Web Server.This issue affects HB AUDIO GALLERY: from n/a through = 3.0...

10CVSS7.2AI score0.00543EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 3:18 a.m.•17 views

CVE-2024-51789

Unrestricted Upload of File with Dangerous Type vulnerability in UjW0L Image Classify image-classify allows Upload a Web Shell to a Web Server.This issue affects Image Classify: from n/a through = 1.0.0...

10CVSS7.2AI score0.00578EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 3:13 a.m.•16 views

CVE-2024-51792

Unrestricted Upload of File with Dangerous Type vulnerability in Dang Ngoc Binh Audio Record audio-record allows Upload a Web Shell to a Web Server.This issue affects Audio Record: from n/a through = 1.0...

10CVSS5.9AI score0.00576EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 12:54 a.m.•18 views

CVE-2024-37418

Unrestricted Upload of File with Dangerous Type vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through = 4.4.6...

9.9CVSS5.9AI score0.00537EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 12:39 a.m.•12 views

CVE-2024-37424

Unrestricted Upload of File with Dangerous Type vulnerability in Automattic Newspack Blocks allows Upload a Web Shell to a Web Server.This issue affects Newspack Blocks: from n/a through 3.0.8...

9.9CVSS6.8AI score0.00566EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 12:37 a.m.•21 views

CVE-2024-37420

Unrestricted Upload of File with Dangerous Type vulnerability in WPZita Zita Elementor Site Library allows Upload a Web Shell to a Web Server.This issue affects Zita Elementor Site Library: from n/a through 1.6.1...

9.9CVSS6.8AI score0.00492EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/02/04 11:35 p.m.•21 views

CVE-2024-48034

Unrestricted Upload of File with Dangerous Type vulnerability in fliperrr Creates 3D Flipbook, PDF Flipbook create-flipbook-from-pdf allows Upload a Web Shell to a Web Server.This issue affects Creates 3D Flipbook, PDF Flipbook: from n/a through = 1.2...

9.9CVSS5.9AI score0.00492EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/04 11:35 p.m.•20 views

CVE-2024-48027

Unrestricted Upload of File with Dangerous Type vulnerability in xaraartech External featured image from bing external-featured-image-from-bing allows Upload a Web Shell to a Web Server.This issue affects External featured image from bing: from n/a through = 1.0.2...

9.9CVSS5.9AI score0.00492EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/04 11:33 p.m.•18 views

CVE-2024-48035

Unrestricted Upload of File with Dangerous Type vulnerability in takayukii ACF Images Search And Insert acf-images-search-and-insert allows Upload a Web Shell to a Web Server.This issue affects ACF Images Search And Insert: from n/a through = 1.1.4...

9.9CVSS5.9AI score0.00492EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/30 3:31 p.m.•23 views

GHSA-35P2-5VRH-M3P6 DevDojo Voyager Arbitrary File Write

DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. An authenticated user can upload a web shell causing arbitrary code execution on the server...

4.3CVSS5.2AI score0.14116EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2025/01/30 3:15 p.m.•16 views

CVE-2024-55417

DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. An authenticated user can upload a web shell causing arbitrary code execution on the server...

4.3CVSS7.9AI score0.14116EPSS
SaveExploits1References4
NVD
NVD
•added 2025/01/30 3:15 p.m.•27 views

CVE-2024-55417

DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. An authenticated user can upload a web shell causing arbitrary code execution on the server...

4.3CVSS0.14116EPSS
SaveExploits1References2
Talos Blog
Talos Blog
•added 2025/01/30 11:00 a.m.•29 views

Talos IR trends Q4 2024: Web shell usage and exploitation of public-facing applications spike

Threat actors increasingly deployed web shells against vulnerable web applications and primarily exploited vulnerable or unpatched public-facing applications to gain initial access in Q4, a notable shift from previous quarters. The functionality of the web shells and targeted web applications...

8.7AI score
SaveExploits0
OSV
OSV
•added 2025/01/30 12:00 a.m.•28 views

CVE-2024-55417

DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. An authenticated user can upload a web shell causing arbitrary code execution on the server...

4.3CVSS7.6AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/01/30 12:00 a.m.•11 views

CVE-2024-55417

DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. An authenticated user can upload a web shell causing arbitrary code execution on the server...

5.3AI score0.14116EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/30 12:00 a.m.•2 views

CVE-2024-55417: Unrestricted Upload of File with Dangerous Type

DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. An authenticated user can upload a web shell causing arbitrary code execution on the server...

4.3CVSS8.6AI score0.14116EPSS
SaveExploits1References1
OSV
OSV
•added 2025/01/24 6:15 p.m.•12 views

CVE-2025-24650

Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Tourfic allows Upload a Web Shell to a Web Server. This issue affects Tourfic: from n/a through 2.15.3...

9.1CVSS7.3AI score0.00638EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/24 6:15 p.m.•44 views

CVE-2025-24650

Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Tourfic tourfic allows Upload a Web Shell to a Web Server.This issue affects Tourfic: from n/a through = 2.15.3...

9.1CVSS0.00638EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/24 5:24 p.m.•83 views

CVE-2025-24650

CVE-2025-24650 is a WordPress Tourfic plugin vulnerability (versions

9.1CVSS7.2AI score0.00638EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder