Danvei233 vulnerabilities
We track 2 vulnerabilities in Danvei233 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 18, 2026.
2vulnerabilities
0critical
2high
0exploited
7.2average CVSS score
Latest Danvei233 vulnerabilities
- 7.2 High severity
xiaoheiFS: Unrestricted Upload of File with Dangerous Type
xiaoheiFS is a self-hosted financial and operational system for cloud service businesses. In versions up to and including 0.3.15, the `AdminPaymentPluginUpload` endpoint lets admins upload any file to `plugins/payment/`. It only checks a hardcoded password (`q
- 7.2 High severity
xiaoheiFS: Improper Neutralization of Special Elements used in an OS Command
xiaoheiFS is a self-hosted financial and operational system for cloud service businesses. In versions up to and including 0.3.15, the standard plugin system allows admins to upload a ZIP file containing a binary and a `manifest.json`. The server trusts the `bi