Lucene search
+L

2745 matches found

Vulnrichment
Vulnrichment
•added 2025/12/30 4:48 p.m.•8 views

CVE-2025-52835 WordPress WING WordPress Migrator plugin <= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ConoHa by GMO WING WordPress Migrator wing-migrator allows Upload a Web Shell to a Web Server.This issue affects WING WordPress Migrator: from n/a through = 1.2.0...

9.6CVSS5.8AI score0.00205EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/30 8:16 a.m.•33 views

CVE-2025-15228

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS8.4AI score0.00591EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/30 12:32 a.m.•38 views

EUVD-2025-205656

Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.7.3...

9.9CVSS6.4AI score0.00418EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/30 12:00 a.m.•26 views

PT-2025-54199

Name of the Vulnerable Software and Affected Versions ConoHa by GMO WING WordPress Migrator versions through 1.1.9 Description A Cross-Site Request Forgery CSRF issue exists in ConoHa by GMO WING WordPress Migrator. This allows for the upload of a web shell to a web server. Exploitation requires ...

9.6CVSS6.7AI score0.00205EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/30 12:00 a.m.•3 views

CVE-2025-52835: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ConoHa by GMO WING WordPress Migrator wing-migrator allows Upload a Web Shell to a Web Server.This issue affects WING WordPress Migrator: from n/a through = 1.2.0...

9.6CVSS5.8AI score0.00205EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/29 10:15 p.m.•26 views

CVE-2025-68562

Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.7.3...

9.9CVSS0.00418EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/29 9:13 p.m.•48 views

CVE-2025-68562

CVE-2025-68562 : MapSVG (Vector/Image/Google Maps)

9.9CVSS5.8AI score0.00418EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/29 9:13 p.m.•52 views

CVE-2025-68562 WordPress MapSVG plugin <= 8.7.3 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.7.3...

9.9CVSS0.00418EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/29 9:13 p.m.•14 views

CVE-2025-68562 WordPress MapSVG plugin <= 8.7.3 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.7.3...

9.9CVSS5.8AI score0.00418EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/12/29 6:28 p.m.•177 views

Exploit for CVE-2025-15495

CVE-2025-15495 - Arbitrary File Upload Leading to Remote Code...

5.8CVSS7.8AI score0.00457EPSS
SaveExploits2
OSV
OSV
•added 2025/12/29 8:15 a.m.•15 views

CVE-2025-15228

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS6.4AI score0.00591EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/29 7:18 a.m.•39 views

CVE-2025-15228

BPMFlowWebkit by WELLTEND TECHNOLOGY is affected by an Arbitrary File Upload vulnerability that enables unauthenticated remote attackers to upload and execute a Web Shell backdoor, leading to arbitrary code execution on the server. Affected component is BPMFlowWebkit; root cause is an arbitrary f...

9.8CVSS6.6AI score0.00591EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2025/12/29 7:18 a.m.•18 views

EUVD-2025-205563

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS8AI score0.00591EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/12/29 7:18 a.m.•10 views

CVE-2025-15228 WELLTEND TECHNOLOGY| BPMFlowWebkit - Arbitrary File Upload

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS6.6AI score0.00591EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/29 7:15 a.m.•18 views

CVE-2025-15226

WMPro developed by Sunnet has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS0.00592EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/29 6:39 a.m.•51 views

CVE-2025-15226 Sunnet|WMPro - Arbitrary File Upload

WMPro developed by Sunnet has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS0.00592EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/29 6:39 a.m.•29 views

CVE-2025-15226

CVE-2025-15226 concerns WMPro by Sunnet, where an Arbitrary File Upload vulnerability allows unauthenticated remote attackers to upload and execute a web shell on the server, enabling arbitrary code execution . The vulnerability is described in multiple feeds (NVD/Red Hat/CIRCL/etc.) with no spec...

9.8CVSS6.4AI score0.00592EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2025/12/29 6:39 a.m.•23 views

EUVD-2025-205558

WMPro developed by Sunnet has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS8AI score0.00592EPSS
SaveExploits0References3
NVD
NVD
•added 2025/12/29 1:15 a.m.•20 views

CVE-2025-15067

Unrestricted Upload of File with Dangerous Type vulnerability in Innorix Innorix WP allows Upload a Web Shell to a Web Server.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory where the product is installed ex: innorix/exam...

8.5CVSS0.00144EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/12/29 12:59 a.m.•21 views

EUVD-2025-205541

Unrestricted Upload of File with Dangerous Type vulnerability in Innorix Innorix WP allows Upload a Web Shell to a Web Server.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory where the product is installed ex: innorix/exam...

8.5CVSS6.3AI score0.00144EPSS
SaveExploits0References3
Rows per page
Query Builder