150569 matches found
CVE-2025-10616
A security flaw has been discovered in itsourcecode E-Commerce Website 1.0. Affected is an unknown function of the file /admin/users.php. The manipulation results in unrestricted upload. The attack can be launched remotely. The exploit has been released to the public and may be exploited...
CVE-2025-10616 itsourcecode E-Commerce Website users.php unrestricted upload
A security flaw has been discovered in itsourcecode E-Commerce Website 1.0. Affected is an unknown function of the file /admin/users.php. The manipulation results in unrestricted upload. The attack can be launched remotely. The exploit has been released to the public and may be exploited...
CVE-2025-10616
The CVE-2025-10616 entry concerns itsourcecode E-Commerce Website 1.0. The vulnerable component is the file /admin/users.php where an unspecified manipulation yields an unrestricted upload. The vulnerability can be exploited remotely and the exploit has been released publicly. Other details in co...
CVE-2025-10615
A vulnerability was identified in itsourcecode E-Commerce Website 1.0. This impacts an unknown function of the file /admin/products.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly available and might be used...
CVE-2025-10615 itsourcecode E-Commerce Website products.php unrestricted upload
A vulnerability was identified in itsourcecode E-Commerce Website 1.0. This impacts an unknown function of the file /admin/products.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly available and might be used...
Origin Validation Error
Overview @parcel/reporter-dev-server is a Blazing fast, zero configuration web application bundler Affected versions of this package are vulnerable to Origin Validation Error via improper origin validation in the development server. An attacker can access source code by tricking a developer into...
CVE-2025-10427
A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown function of the file /admin/operation/user.php. Executing manipulation of the argument websiteimage can lead to unrestricted upload. It is possible to launch the attack remotely. The...
CVE-2025-10428
A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/seosetting.php of the component Setting Handler. The manipulation of the argument websiteimage leads to unrestricted upload. The attack can be...
itsourcecode E-Commerce Website 代码问题漏洞
itsourcecode E-Commerce Website is an open source e-commerce website by itsourcecode. A code issue vulnerability exists in version 1.0 of itsourcecode E-Commerce Website, which originates from an unlimited upload function in file /admin/users.php, which could lead to a remote attack...
CVE-2025-10616: Unrestricted Upload of File with Dangerous Type
A security flaw has been discovered in itsourcecode E-Commerce Website 1.0. Affected is an unknown function of the file /admin/users.php. The manipulation results in unrestricted upload. The attack can be launched remotely. The exploit has been released to the public and may be exploited...
CVE-2025-10615: Unrestricted Upload of File with Dangerous Type
A vulnerability was identified in itsourcecode E-Commerce Website 1.0. This impacts an unknown function of the file /admin/products.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly available and might be used...
Use of Low-Level Functionality
Overview Affected versions of this package are vulnerable to Use of Low-Level Functionality through improper validation of user-supplied input. An attacker can execute arbitrary code or compromise user data by enticing a victim to visit a malicious website. Remediation Upgrade thunderbird to...
PT-2025-37927
Name of the Vulnerable Software and Affected Versions: Focus for iOS versions prior to 143.0 Description: Opening links via the contextual menu for certain URL schemes would fail to load, but the toolbar would not refresh correctly. This could allow attackers to spoof websites if users were coerc...
CVE-2025-10290: User Interface (UI) Misrepresentation of Critical Information
Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but would not refresh the toolbar correctly, allowing attackers to spoof websites if users were coerced into opening a link explicitly through a long-press. This vulnerability was fixed in Focus for iOS...
The vulnerability of the AVReg software for creating audio/video recorders lies in the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks.
The vulnerability of the AVReg software for creating audio/video recorders is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the AVReg software for creating audio/video recorders lies in the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks.
The vulnerability of the AVReg software for creating audio/video recorders is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the "Kub24" accounting management software lies in the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks (XSS).
The vulnerability of the "Kub24" accounting management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability of the "Kub24" accounting management software system lies in the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks (XSS).
The vulnerability of the "Kub24" accounting management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability of the AVReg software for creating audio/video recorders lies in the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks.
The vulnerability of the AVReg software for creating audio/video recorders is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the AVReg software for creating audio/video recorders lies in the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks.
The vulnerability of the AVReg software for creating audio/video recorders is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...