2676 matches found
PT-2025-41471
Name of the Vulnerable Software and Affected Versions Newforma Info Exchange NIX versions prior to 2023.1 Description Newforma Info Exchange NIX contains a flaw in the /UserWeb/Common/UploadBlueimp.ashx API endpoint that allows an authenticated attacker to upload arbitrary files to any location...
CVE-2025-35055: Improper Limitation of a Pathname to a Restricted Directory
Newforma Info Exchange NIX '/UserWeb/Common/UploadBlueimp.ashx' allows an authenticated attacker to upload an arbitrary file to any location writable by the NIX application. An attacker can upload and run a web shell or other content executable by the web server. An attacker can also delete...
SmarterTools SmarterMail GUID File Upload Vulnerability
This module exploits a pre-auth remote code execution vulnerability in SmarterTools SmarterMail before version 100.0.9413. The endpoint /api/upload fails to sanitize the contextData POST parameter which can contain JSON data with a "guid" key that allows directory traversal. By leveraging this...
Chinese Hackers Weaponize Open-Source Nezha Tool in New Attack Wave
Threat actors with suspected ties to China have turned a legitimate open-source monitoring tool called Nezha into an attack weapon, using it to deliver a known malware called Gh0st RAT to targets. The activity, observed by cybersecurity company Huntress in August 2025, is characterized by the use...
EUVD-2017-3176
Malware in sbrugna...
EUVD-2017-14325
Malware in sbrugna...
EUVD-2021-25190
Malware in sbrugna...
EUVD-2020-16566
Malware in sbrugna...
EUVD-2021-19460
Malware in sbrugna...
EUVD-2021-11123
Malware in sbrugna...
EUVD-2018-19006
Malware in sbrugna...
EUVD-2021-13428
Malware in sbrugna...
EUVD-2019-3350
Malware in sbrugna...
EUVD-2014-9811
Malware in sbrugna...
CVE-2025-61687: Unrestricted Upload of File with Dangerous Type
Flowise is a drag & drop user interface to build a customized large language model flow. A file upload vulnerability in version 3.0.7 of FlowiseAI allows authenticated users to upload arbitrary files without proper validation. This enables attackers to persistently store malicious Node.js web...
EUVD-2025-19341
Malicious code in bioql PyPI...
EUVD-2024-36654
Malicious code in bioql PyPI...
EUVD-2024-45903
Malicious code in bioql PyPI...