CVE-2025-65783

An arbitrary file upload vulnerability in the /utils/uploadFile component of Hubert Imoveis e Administracao Ltda Hub v2.0 1.27.3 allows attackers to execute arbitrary code via uploading a crafted PDF file.

CVE-2025-65784

The software Hubert Imoveis e Administracao Ltda Hub v2.0 version 1.27.3 is susceptible to a vulnerability caused by insecure permissions . This flaw allows authenticated attackers with low-level privileges to gain unauthorized access to other users' information by submitting a crafted API reques...