PT-2026-104490

Name of the Vulnerable Software and Affected Versions ProfilePress versions prior to 4.17.5 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected Cross-Site Scripting. This occurs when a malicious filename is supplied to the ppress...

EUVD-2025-30255

Malicious code in bioql PyPI...

EUVD-2025-30248

Malicious code in bioql PyPI...

EUVD-2025-4568

Malicious code in bioql PyPI...

CVE-2025-54815

Server-side template injection SSTI vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes...

CVE-2025-52159

Hardcoded credentials in default configuration of PPress 0.0.9...

CVE-2025-54761

An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie...

PPress security vulnerabilities

PPress is a Python based blog CMS system by yandaozi individual developer. A security vulnerability exists in PPress version 0.0.9, which stems from a specially crafted session cookie that may result in elevated privileges...

PPress security vulnerabilities

PPress is a Python-based blogging CMS system by the individual developer yandaozi. A security vulnerability exists in PPress version 0.0.9, which stems from hard-coded credentials included in the default configuration...

PPress security vulnerabilities

PPress is a Python based blog CMS system by yandaozi individual developer. A security vulnerability exists in PPress version 0.0.9, which originates from server-side template injection and could lead to the execution of arbitrary code...

CVE-2025-52159

Hardcoded credentials in default configuration of PPress 0.0.9...

CVE-2025-52159

Hardcoded credentials in default configuration of PPress 0.0.9...

CVE-2025-54761

An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie...

CVE-2025-54815

Server-side template injection SSTI vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes...

CVE-2025-54815

Server-side template injection SSTI vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes...

CVE-2025-54761

An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie...

CVE-2025-52159

The Python-based blogging CMS system PPress version 0.0.9 is vulnerable due to hardcoded credentials included in its default configuration. This vulnerability allows for unauthorized access to the system. To mitigate this risk, it is recommended to change the default credentials in the PPress con...

CVE-2025-54761: Improper Privilege Management

An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie...

CVE-2025-52159

Hardcoded credentials in default configuration of PPress 0.0.9...

CVE-2025-54815

A Server-side Template Injection (SSTI) vulnerability exists in PPress version 0.0.9 (and 0.0.9-beta), a Python-based blog CMS. The root cause allows attackers to execute arbitrary code by providing crafted themes . This vulnerability is part of a chain that can lead to remote code execution. Cur...