EUVD-2024-46031

Malicious code in bioql PyPI...

EUVD-2023-23730

Malicious code in bioql PyPI...

EUVD-2023-45338

Malicious code in bioql PyPI...

EUVD-2025-15987

Malicious code in bioql PyPI...

EUVD-2025-5468

Malicious code in bioql PyPI...

CVE-2024-52677

HkCms = v2.3.2.240702 is vulnerable to file upload in the getFileName method in /app/common/library/Upload.php...

CVE-2023-40786

HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting XSS allowing administrator cookies to be stolen...

CVE-2025-5013

A vulnerability, which was classified as problematic, was found in HkCms up to 2.3.2.240702. This affects an unknown part of the file /index.php/search/index.html of the component Search. The manipulation of the argument keyword leads to cross site scripting. It is possible to initiate the attack...

CVE-2025-5013

A vulnerability, which was classified as problematic, was found in HkCms up to 2.3.2.240702. This affects an unknown part of the file /index.php/search/index.html of the component Search. The manipulation of the argument keyword leads to cross site scripting. It is possible to initiate the attack...

CVE-2025-5013

A vulnerability, which was classified as problematic, was found in HkCms up to 2.3.2.240702. This affects an unknown part of the file /index.php/search/index.html of the component Search. The manipulation of the argument keyword leads to cross site scripting. It is possible to initiate the attack...

CVE-2025-5013

CVE-2025-5013 affects HkCms up to version 2.3.2.240702. The known issue lies in the /index.php/search/index.html file, where manipulating the keyword argument enables cross-site scripting (XSS). The vulnerability is exploitable remotely, and public exploit information is noted in the sources. Con...

CVE-2025-5013 HkCms Search index.html cross site scripting

A vulnerability, which was classified as problematic, was found in HkCms up to 2.3.2.240702. This affects an unknown part of the file /index.php/search/index.html of the component Search. The manipulation of the argument keyword leads to cross site scripting. It is possible to initiate the attack...

CVE-2025-5013 HkCms Search index.html cross site scripting

A vulnerability, which was classified as problematic, was found in HkCms up to 2.3.2.240702. This affects an unknown part of the file /index.php/search/index.html of the component Search. The manipulation of the argument keyword leads to cross site scripting. It is possible to initiate the attack...

PT-2025-22322 · Hkcms · Hkcms

Name of the Vulnerable Software and Affected Versions: HkCms versions up to 2.3.2.240702 Description: A problematic issue was found in HkCms, affecting an unknown part of the file /index.php/search/index.html of the component Search. The manipulation of the keyword argument leads to cross-site...

HkCms 安全漏洞

HkCms is a free and open source content management system from HkCms Open Source. A security vulnerability exists in HkCms 2.3.2.240702 and earlier versions, which stems from improper manipulation of the keyword parameter in the file /index.php/search/index.html, which may lead to cross-site...

CVE-2025-5013: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in HkCms up to 2.3.2.240702. This affects an unknown part of the file /index.php/search/index.html of the component Search. The manipulation of the argument keyword leads to cross site scripting. It is possible to initiate the attack...

CVE-2025-25761

HkCms v2.3.2.240702 was discovered to contain an arbitrary file write vulnerability in the component Appcenter.php...

CVE-2025-25761

HkCms v2.3.2.240702 was discovered to contain an arbitrary file write vulnerability in the component Appcenter.php...

CVE-2025-25761

HkCms v2.3.2.240702 was discovered to contain an arbitrary file write vulnerability in the component Appcenter.php...

CVE-2025-25761

HkCms version v2.3.2.240702 is vulnerable to an arbitrary file write vulnerability within the Appcenter.php component. This flaw allows an attacker to write files to arbitrary locations, which could lead to significant security compromises. To mitigate this risk, it is recommended to disable the ...