42 matches found
EUVD-2025-4568
Malicious code in bioql PyPI...
EUVD-2025-30248
Malicious code in bioql PyPI...
EUVD-2025-30255
Malicious code in bioql PyPI...
CVE-2025-54815
Server-side template injection SSTI vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes...
CVE-2025-52159
Hardcoded credentials in default configuration of PPress 0.0.9...
CVE-2025-54761
An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie...
PPress 安全漏洞
PPress is a Python based blog CMS system by yandaozi individual developer. A security vulnerability exists in PPress version 0.0.9, which stems from a specially crafted session cookie that may result in elevated privileges...
PPress 安全漏洞
PPress is a Python-based blogging CMS system by the individual developer yandaozi. A security vulnerability exists in PPress version 0.0.9, which stems from hard-coded credentials included in the default configuration...
PPress 安全漏洞
PPress is a Python based blog CMS system by yandaozi individual developer. A security vulnerability exists in PPress version 0.0.9, which originates from server-side template injection and could lead to the execution of arbitrary code...
CVE-2025-52159
Hardcoded credentials in default configuration of PPress 0.0.9...
CVE-2025-54761
An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie...
CVE-2025-52159
Hardcoded credentials in default configuration of PPress 0.0.9...
CVE-2025-54815
Server-side template injection SSTI vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes...
CVE-2025-52159
Hardcoded credentials in default configuration of PPress 0.0.9...
PT-2025-38617
Name of the Vulnerable Software and Affected Versions PPress version 0.0.9 Description An issue exists in PPress version 0.0.9 that allows attackers to gain escalated privileges through a crafted session cookie. Recommendations At the moment, there is no information about a newer version that...
CVE-2025-54761
An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie...
CVE-2025-52159
PPress CMS version 0.0.9 is vulnerable to a security flaw caused by hardcoded credentials within its default configuration. While the primary CVE description identifies this as a credential issue, connected documentation clarifies that this is part of a vulnerability chain where incorrect access ...
CVE-2025-54761: Improper Privilege Management
An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie...
CVE-2025-54815
PPress CMS version 0.0.9 (including version 0.0.9-beta ) is vulnerable to a Server-side template injection (SSTI) . Attackers can exploit this issue by providing crafted themes to execute arbitrary code on the server. No fixed version is currently available, and no specific remediation or patch i...