Lucene search
+L

2738 matches found

NVD
NVD
•added 2025/12/29 10:15 p.m.•26 views

CVE-2025-68562

Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.7.3...

9.9CVSS0.00418EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/29 9:13 p.m.•48 views

CVE-2025-68562

CVE-2025-68562 : MapSVG (Vector/Image/Google Maps)

9.9CVSS5.8AI score0.00418EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/29 9:13 p.m.•52 views

CVE-2025-68562 WordPress MapSVG plugin <= 8.7.3 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.7.3...

9.9CVSS0.00418EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/29 9:13 p.m.•14 views

CVE-2025-68562 WordPress MapSVG plugin <= 8.7.3 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.7.3...

9.9CVSS5.8AI score0.00418EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/12/29 6:28 p.m.•175 views

Exploit for CVE-2025-15495

CVE-2025-15495 - Arbitrary File Upload Leading to Remote Code...

5.8CVSS7.8AI score0.00457EPSS
SaveExploits2
OSV
OSV
•added 2025/12/29 8:15 a.m.•15 views

CVE-2025-15228

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS6.4AI score0.00591EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/29 7:18 a.m.•39 views

CVE-2025-15228

BPMFlowWebkit by WELLTEND TECHNOLOGY is affected by an Arbitrary File Upload vulnerability that enables unauthenticated remote attackers to upload and execute a Web Shell backdoor, leading to arbitrary code execution on the server. Affected component is BPMFlowWebkit; root cause is an arbitrary f...

9.8CVSS6.6AI score0.00591EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2025/12/29 7:18 a.m.•18 views

EUVD-2025-205563

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS8AI score0.00591EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/12/29 7:18 a.m.•10 views

CVE-2025-15228 WELLTEND TECHNOLOGY| BPMFlowWebkit - Arbitrary File Upload

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS6.6AI score0.00591EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/29 7:15 a.m.•18 views

CVE-2025-15226

WMPro developed by Sunnet has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS0.00592EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/29 6:39 a.m.•51 views

CVE-2025-15226 Sunnet|WMPro - Arbitrary File Upload

WMPro developed by Sunnet has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS0.00592EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/29 6:39 a.m.•29 views

CVE-2025-15226

CVE-2025-15226 concerns WMPro by Sunnet, where an Arbitrary File Upload vulnerability allows unauthenticated remote attackers to upload and execute a web shell on the server, enabling arbitrary code execution . The vulnerability is described in multiple feeds (NVD/Red Hat/CIRCL/etc.) with no spec...

9.8CVSS6.4AI score0.00592EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2025/12/29 6:39 a.m.•23 views

EUVD-2025-205558

WMPro developed by Sunnet has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS8AI score0.00592EPSS
SaveExploits0References3
NVD
NVD
•added 2025/12/29 1:15 a.m.•20 views

CVE-2025-15067

Unrestricted Upload of File with Dangerous Type vulnerability in Innorix Innorix WP allows Upload a Web Shell to a Web Server.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory where the product is installed ex: innorix/exam...

8.5CVSS0.00144EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/29 12:59 a.m.•43 views

CVE-2025-15067

CVE-2025-15067 affects Innorix WP. The issue is an Unrestricted Upload of File with Dangerous Type that can allow uploading a Web Shell to the web server when anexam directory exists under the installation path (e.g., innorix/exam). All versions are affected as stated in the initial description. ...

8.5CVSS5.8AI score0.00144EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/12/29 12:59 a.m.•21 views

EUVD-2025-205541

Unrestricted Upload of File with Dangerous Type vulnerability in Innorix Innorix WP allows Upload a Web Shell to a Web Server.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory where the product is installed ex: innorix/exam...

8.5CVSS6.3AI score0.00144EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/12/29 12:59 a.m.•10 views

CVE-2025-15067 Unrestricted File Upload and RCE in Innorix WP

Unrestricted Upload of File with Dangerous Type vulnerability in Innorix Innorix WP allows Upload a Web Shell to a Web Server.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory where the product is installed ex: innorix/exam...

8.5CVSS5.8AI score0.00144EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/29 12:00 a.m.•19 views

PT-2025-53679

Name of the Vulnerable Software and Affected Versions Innorix WP affected versions not specified Description The software contains a flaw related to unrestricted file uploads, potentially allowing an attacker to upload a web shell to a web server. This issue arises if the 'exam' directory exists...

8.5CVSS6.6AI score0.00144EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2025/12/29 12:00 a.m.•25 views

SUNNET WMPro 代码问题漏洞

SUNNET WMPro is a suite of online learning platforms from Taiwan, China-based Sunnet Technology SUNNET. SUNNET WMPro suffers from a code issue vulnerability that stems from the presence of an arbitrary file upload vulnerability that could allow an unauthenticated, remote attacker to upload and...

9.8CVSS7.9AI score0.00592EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/29 12:00 a.m.•16 views

WELLTEND BPMFlowWebkit 代码问题漏洞

WELLTEND BPMFlowWebkit is a business process management system from WELLTEND Corporation of Taiwan, China. A code issue vulnerability exists in WELLTEND BPMFlowWebkit, which stems from the presence of an arbitrary file upload vulnerability that could allow an unauthenticated, remote attacker to...

9.8CVSS7.8AI score0.00591EPSS
SaveExploits0References2
Rows per page
Query Builder