EUVD-2019-10775

Malware in sbrugna...

CVE-2025-11331 IdeaCMS Website Name Config.php command injection

A vulnerability was found in IdeaCMS up to 1.8. The impacted element is an unknown function of the file app/common/logic/admin/Config.php of the component Website Name Handler. Performing manipulation of the argument 网站名称 results in command injection. The attack may be initiated remotely. The...

CVE-2025-11331

IdeaCMS up to version 1.8 contains a command injection in the Website Name Handler component, via the argument 网站名称 manipulated in app/common/logic/admin/Config.php. The vulnerability arises from an unknown function handling that input, enabling remote execution after exploitation. Public exploit...

IdeaCMS 命令注入漏洞

IdeaCMS is an open source shopping mall system by IdeaCMS. A command injection vulnerability exists in IdeaCMS 1.8 and earlier versions, which stems from incorrect manipulation of the parameter site name in the file app/common/logic/admin/Config.php, which could lead to a command injection attack...

CVE-2025-11331: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in IdeaCMS up to 1.8. The impacted element is an unknown function of the file app/common/logic/admin/Config.php of the component Website Name Handler. Performing manipulation of the argument 网站名称 results in command injection. The attack may be initiated remotely. The...

EUVD-2025-19865

Malicious code in bioql PyPI...

EUVD-2022-4972

Malicious code in bioql PyPI...

EUVD-2025-5097

Malicious code in bioql PyPI...

EUVD-2022-34625

Malicious code in bioql PyPI...

EUVD-2023-51556

Malicious code in bioql PyPI...

EUVD-2025-5096

Malicious code in bioql PyPI...

EUVD-2025-19866

Malicious code in bioql PyPI...

EUVD-2025-28733

Malicious code in bioql PyPI...

EUVD-2025-16372

Malicious code in bioql PyPI...

PT-2025-38116

Name of the Vulnerable Software and Affected Versions: WP Import – Ultimate CSV XML Importer for WordPress plugin versions prior to 7.28 Description: The WP Import – Ultimate CSV XML Importer for WordPress plugin is susceptible to arbitrary file deletion due to inadequate file path validation...

CVE-2025-10176

The The Hack Repair Guy's Plugin Archiver plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the prepareitems function in all versions up to, and including, 2.0.4. This makes it possible for authenticated attackers, with Administrator-level...

CVE-2025-8895

The WP Webhooks plugin for WordPress is vulnerable to arbitrary file copy due to missing validation of user-supplied input in all versions up to, and including, 3.3.5. This makes it possible for unauthenticated attackers to copy arbitrary files on the affected site's server to arbitrary locations...

CVE-2025-9048

The Wptobe-memberships plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delimgajaxcall function in all versions up to, and including, 3.4.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

CVE-2025-8895

The WP Webhooks plugin for WordPress is vulnerable to arbitrary file copy due to missing validation of user-supplied input in all versions up to, and including, 3.3.5. This makes it possible for unauthenticated attackers to copy arbitrary files on the affected site's server to arbitrary locations...

CVE-2025-8895: Improper Limitation of a Pathname to a Restricted Directory

The WP Webhooks plugin for WordPress is vulnerable to arbitrary file copy due to missing validation of user-supplied input in all versions up to, and including, 3.3.5. This makes it possible for unauthenticated attackers to copy arbitrary files on the affected site's server to arbitrary locations...