https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 23:12:20 +0000 https://cve.radiocsirt.org/vuln/cve-2012-10064 <p><strong>Affected:</strong> Omnilogic Omni Secure Files</p> <p>Omni Secure Files plugin versions prior to 0.1.14 contain an arbitrary file upload vulnerability in the bundled plupload example endpoint. The /wp-content/plugins/omni-secure-files/plupload/examples/upload.php handler allows unauthenticated uploads without enforcing safe file type restrictions, enabling an attacker to place attacker-controlled files under the plugin&#39;s uploads directory. This can lead to remote code execution if a server-executable file type is uploaded and subsequently accessed.</p> <p><strong>Affected:</strong> Omnilogic Omni Secure Files</p> <p>Omni Secure Files plugin versions prior to 0.1.14 contain an arbitrary file upload vulnerability in the bundled plupload example endpoint. The /wp-content/plugins/omni-secure-files/plupload/examples/upload.php handler allows unauthenticated uploads without enforcing safe file type restrictions, enabling an attacker to place attacker-controlled files under the plugin&#39;s uploads directory. This can lead to remote code execution if a server-executable file type is uploaded and subsequently accessed.</p> https://cve.radiocsirt.org/vuln/cve-2012-10064