DDumbWareio

Products

Exploited and recent CVEs

• CVE-2026-45231 Medium 6.1 DumbAssets 1.0.11 Stored Cross-Site Scripting via Asset Fields 0.2%
• CVE-2026-45230 Critical 9.1 DumbAssets 1.0.11 Path Traversal File Deletion via /api/delete-file 0.6%
• CVE-2025-47929 Low 2.1 DumbDrop vulnerable to DOM XSS via file upload 0.4%
• CVE-2025-24971 Critical 9.5 OS Command Injection endpoint '/upload/init' parameter 'filename' (RCE) in DumpDrop 3.1%
• CVE-2025-24891 Critical 9.7 Dumb Drop has an arbitrary file overwrite and path traversal for root shell 0.6%