19 matches found
EUVD-2018-10453
Malware in sbrugna...
EUVD-2024-35281
Malicious code in bioql PyPI...
CVE-2024-35324
Douchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php...
CVE-2024-35324
Douchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php...
CVE-2024-35324
Douchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php...
CVE-2024-35324
Douchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php...
CVE-2024-35324
Douchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php...
CVE-2024-35324: Improper Limitation of a Pathname to a Restricted Directory
Douchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php...
Douchat 安全漏洞
Douchat is a clean and efficient WeChat development framework from Douxin Douchat. A security vulnerability exists in Douchat version 4.0.5, which originates from an arbitrary file upload vulnerability in the file Public/Plugins/webuploader/server/preview.php...
PT-2024-26432 · Douchat · Douchat
Name of the Vulnerable Software and Affected Versions: Douchat version 4.0.5 Description: The issue is related to an arbitrary file upload vulnerability. This vulnerability can be exploited via the Public/Plugins/webuploader/server/preview.php endpoint. Recommendations: For Douchat version 4.0.5,...
CVE-2018-18737
An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexmlloadstring. This can also be used for SSRF...
CVE-2018-18737
An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexmlloadstring. This can also be used for SSRF...
Design/Logic Flaw
An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexmlloadstring. This can also be used for SSRF...
CVE-2018-18737
An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexmlloadstring. This can also be used for SSRF...
CVE-2018-18737
An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexmlloadstring. This can also be used for SSRF...
CVE-2018-18737
CVE-2018-18737 describes an XXE in Douchat 4.0.4 caused by Data\notify.php calling simplexml_load_string, which can also enable SSRF. Affected software: Douchat 4.0.4 (no other versions/products specified). Root cause: improper XML parsing via simplexml_load_string leading to external entity proc...
PT-2018-14615
Name of the Vulnerable Software and Affected Versions Douchat version 4.0.4 Description An issue was discovered in Douchat due to the use of simplexml load string in Data/notify.php, which can lead to XXE and potentially be used for SSRF. Recommendations For Douchat version 4.0.4, consider...
CVE-2018-18737: Improper Restriction of XML External Entity Reference
An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexmlloadstring. This can also be used for SSRF...
