12 matches found
EUVD-2025-21360
Malicious code in bioql PyPI...
CVE-2025-7626
A vulnerability has been found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd and classified as critical. Affected by this vulnerability is the function onlinePreview of the file /onlinePreview. The manipulation of the argument url leads to path traversal. The...
CVE-2025-7628
A vulnerability was found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd. It has been classified as critical. This affects the function deleteFile of the file /deleteFile. The manipulation of the argument fileName leads to path traversal. It is possible to...
CVE-2025-7625
A vulnerability, which was classified as critical, was found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd. Affected is the function Download of the file /download. The manipulation of the argument url leads to path traversal. It is possible to launch the attac...
CVE-2025-7628
A vulnerability was found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd. It has been classified as critical. This affects the function deleteFile of the file /deleteFile. The manipulation of the argument fileName leads to path traversal. It is possible to...
CVE-2025-7627
The CVE-2025-7627 entry concerns YiJiuSmile kkFileViewOfficeEdit. Affected is the fileUpload function at /fileUpload, where manipulation of the File argument enables unrestricted file uploads. Attack may be launched remotely, and the exploit has been publicly disclosed. The product uses a rolling...
CVE-2025-7627 YiJiuSmile kkFileViewOfficeEdit fileUpload unrestricted upload
A vulnerability was found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd and classified as critical. Affected by this issue is the function fileUpload of the file /fileUpload. The manipulation of the argument File leads to unrestricted upload. The attack may be...
CVE-2025-7626
The vulnerability CVE-2025-7626 affects YiJiuSmile kkFileViewOfficeEdit, specifically the onlinePreview function in /onlinePreview. The root cause is a path traversal flaw caused by manipulating the url argument, enabling remote exploitation. Public exploit information is indicated in multiple so...
CVE-2025-7625 YiJiuSmile kkFileViewOfficeEdit download path traversal
A vulnerability, which was classified as critical, was found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd. Affected is the function Download of the file /download. The manipulation of the argument url leads to path traversal. It is possible to launch the attac...
CVE-2025-7625
YiJiuSmile kkFileViewOfficeEdit contains a path traversal vulnerability in the /download Download function. Manipulating the url parameter enables remote exploitation. Public exploit details exist; no version information or patched releases are provided in the documents. Affected component: kkFil...
CVE-2025-7625 YiJiuSmile kkFileViewOfficeEdit download path traversal
A vulnerability, which was classified as critical, was found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd. Affected is the function Download of the file /download. The manipulation of the argument url leads to path traversal. It is possible to launch the attac...
PT-2025-29502 · Yijiusmile · Kkfileviewofficeedit
Name of the Vulnerable Software and Affected Versions: YiJiuSmile kkFileViewOfficeEdit affected versions not specified Description: A critical issue exists in the onlinePreview function of the /onlinePreview file. Manipulation of the url argument can lead to path traversal, allowing for remote...