38 matches found
EUVD-2025-4568
Malicious code in bioql PyPI...
EUVD-2025-30255
Malicious code in bioql PyPI...
EUVD-2025-30248
Malicious code in bioql PyPI...
CVE-2025-54815
Server-side template injection SSTI vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes...
CVE-2025-52159
Hardcoded credentials in default configuration of PPress 0.0.9...
CVE-2025-54761
An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie...
PPress 安全漏洞
PPress is a Python based blog CMS system by yandaozi individual developer. A security vulnerability exists in PPress version 0.0.9, which stems from a specially crafted session cookie that may result in elevated privileges...
PPress 安全漏洞
PPress is a Python based blog CMS system by yandaozi individual developer. A security vulnerability exists in PPress version 0.0.9, which originates from server-side template injection and could lead to the execution of arbitrary code...
PPress 安全漏洞
PPress is a Python-based blogging CMS system by the individual developer yandaozi. A security vulnerability exists in PPress version 0.0.9, which stems from hard-coded credentials included in the default configuration...
CVE-2025-52159
Hardcoded credentials in default configuration of PPress 0.0.9...
CVE-2025-54815
Server-side template injection SSTI vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes...
CVE-2025-54761
An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie...
CVE-2025-52159
Hardcoded credentials in default configuration of PPress 0.0.9...
CVE-2025-52159
Hardcoded credentials in default configuration of PPress 0.0.9...
CVE-2025-54761
An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie...
PT-2025-38617
Name of the Vulnerable Software and Affected Versions PPress version 0.0.9 Description An issue exists in PPress version 0.0.9 that allows attackers to gain escalated privileges through a crafted session cookie. Recommendations At the moment, there is no information about a newer version that...
CVE-2025-54815
CVE-2025-54815 is a server‑side template injection (SSTI) vulnerability in PPress 0.0.9 (beta). The affected component is the template rendering used by themes, with the underlying issue described as SSTI that enables arbitrary code execution. Public references within the provided documents confi...
CVE-2025-52159
CVE-2025-52159 affects PPress CMS (version 0.0.9; related note mentions 0.0.9-beta). The connected exploit documentation describes a chain leading to remote code execution via server-side template injection (SSTI) and highlights Broken/Incorrect Access Control enabling exploit progression. The ro...