IdeaCMS 命令注入漏洞

IdeaCMS is an open source shopping mall system by IdeaCMS. A command injection vulnerability exists in IdeaCMS 1.8 and earlier versions, which stems from incorrect manipulation of the parameter site name in the file app/common/logic/admin/Config.php, which could lead to a command injection attack...

EUVD-2025-3363

Malicious code in bioql PyPI...

EUVD-2025-8140

Malicious code in bioql PyPI...

EUVD-2024-21005

Malicious code in bioql PyPI...

EUVD-2025-2509

Malicious code in bioql PyPI...

EUVD-2025-9197

Malicious code in bioql PyPI...

EUVD-2025-30525

Malicious code in bioql PyPI...

EUVD-2022-46278

Malicious code in bioql PyPI...

EUVD-2024-29252

Malicious code in bioql PyPI...

EUVD-2025-24013

Malicious code in bioql PyPI...

EUVD-2025-26957

Malicious code in bioql PyPI...

EUVD-2021-28079

Malicious code in bioql PyPI...

EUVD-2025-12568

Malicious code in bioql PyPI...

EUVD-2025-29388

Malicious code in bioql PyPI...

EUVD-2025-24764

Malicious code in bioql PyPI...

CVE-2025-58652 WordPress Carousel Ultimate Plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Carousel Ultimate carousel allows Stored XSS.This issue affects Carousel Ultimate: from n/a through = 1.8...

CVE-2025-58652

CVE-2025-58652 affects Themepoints Carousel Ultimate (Carousel Ultimate) for WordPress. The issue is a Stored XSS caused by improper input neutralization during web page generation, impacting versions up to 1.8 (from n/a through 1.8). CVSS 3.1 base score is 6.5 (AV:N, AC:L, PR:L, UI:R, S:C, C:L, ...

WordPress plugin Carousel Ultimate 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-38941

Name of the Vulnerable Software and Affected Versions Themepoints Carousel Ultimate versions through 1.8 Description The software contains a flaw related to improper input handling during web page creation, which allows for Stored Cross-site Scripting XSS. This issue enables malicious code...

CVE-2025-58820

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Carousel Ultimate carousel allows Stored XSS.This issue affects Carousel Ultimate: from n/a through = 1.8...