10 matches found
EUVD-2025-11557
Malicious code in bioql PyPI...
CVE-2025-29661
Litepubl CMS = 7.0.9 is vulnerable to RCE in admin/service/run...
Arbitrary Code Injection
Overview Affected versions of this package are vulnerable to Arbitrary Code Injection through the admin/service/run process. An attacker can execute arbitrary code on the server by sending crafted requests. Remediation There is no fixed version for litepubl/cms. References - GitHub Issue...
CVE-2025-29661
Litepubl CMS = 7.0.9 is vulnerable to RCE in admin/service/run...
CVE-2025-29661
Litepubl CMS = 7.0.9 is vulnerable to RCE in admin/service/run...
CVE-2025-29661
Litepubl CMS = 7.0.9 is vulnerable to RCE in admin/service/run...
CVE-2025-29661: Improper Control of Generation of Code
Litepubl CMS = 7.0.9 is vulnerable to RCE in admin/service/run...
CVE-2025-29661
Litepubl CMS = 7.0.9 is vulnerable to RCE in admin/service/run...
CVE-2025-29661
Litepubl CMS versions 7.0.9 and earlier are vulnerable to Remote Code Execution (RCE) via the admin/service/run endpoint. The root cause is improper handling of this path, allowing an attacker to execute arbitrary code on the server by sending crafted requests. While no fixed version is explicitl...
PT-2025-17207 · Unknown · Litepubl Cms
Name of the Vulnerable Software and Affected Versions: Litepubl CMS versions 7.0.9 and earlier Description: The issue allows for remote code execution RCE in the admin/service/run endpoint. No information is provided about the estimated number of potentially affected devices worldwide or real-wor...