EUVD-2020-9951

Malware in sbrugna...

EUVD-2024-16992

Malicious code in bioql PyPI...

EUVD-2023-30826

Malicious code in bioql PyPI...

CVE-2023-27037

Qibosoft QiboCMS v7 was discovered to contain a remote code execution RCE vulnerability via the GetTitle function at labelsetrs.php...

CVE-2025-22973

An issue in QiboSoft QiboCMS X1.0 allows a remote attacker to obtain sensitive information via the httpcurl function in the '/application/common. php' file that directly retrieves the URL request response content...

PT-2025-7543 · Qibosoft · Qibocms

Name of the Vulnerable Software and Affected Versions: QiboSoft QiboCMS version X1.0 Description: An issue in QiboSoft QiboCMS allows a remote attacker to obtain sensitive information via the http curl function in the '/application/common.php' file that directly retrieves the URL request response...

CVE-2025-22973

CVE-2025-22973 affects QiboSoft QiboCMS X1.0. The vulnerability is caused by the http_curl() function in /application/common.php, which directly retrieves the URL request response content, enabling a remote attacker to disclose sensitive information. The CVSS v3.1 vector indicates Network access,...

CVE-2025-22973

An issue in QiboSoft QiboCMS X1.0 allows a remote attacker to obtain sensitive information via the httpcurl function in the '/application/common. php' file that directly retrieves the URL request response content...

Deserialization of untrusted data

A vulnerability classified as critical was found in QiboSoft QiboCMS X1 up to 1.0.6. Affected by this vulnerability is the function rmbpay of the file /application/index/controller/Pay.php. The manipulation of the argument callbackclass leads to deserialization. The attack can be launched remotel...

Qibosoft QiboCMS Code Issue Vulnerability

Qibosoft QiboCMS is an application software of China Qibo Software Qibosoft Company. A website builder CMS. A code issue vulnerability exists in Qibosoft QiboCMS versions X1 through 1.0.6, which stems from the parameter callbackclass in file /application/index/controller/Pay.php that causes...

CVE-2023-27037

Qibosoft QiboCMS v7 was discovered to contain a remote code execution RCE vulnerability via the GetTitle function at labelsetrs.php...

Remote code execution

Qibosoft QiboCMS v7 was discovered to contain a remote code execution RCE vulnerability via the GetTitle function at labelsetrs.php...

PT-2023-20911 · Qibosoft · Qibocms

Name of the Vulnerable Software and Affected Versions: Qibosoft QiboCMS version 7 Description: The issue is related to a remote code execution RCE vulnerability. It is exploited via the Get Title function at the label set rs.php file. Recommendations: For Qibosoft QiboCMS version 7, consider...

CVE-2023-27037

Qibosoft QiboCMS v7 was discovered to contain a remote code execution RCE vulnerability via the GetTitle function at labelsetrs.php...

CVE-2020-18022

Cross Site Scripting XSS in Qibosoft QiboCMS v7 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information by injecting arbitrary commands in a HTTP request to the "ewebeditor\3.1.1\kindeditor.js" component...

CVE-2020-18022

CVE-2020-18022 affects Qibosoft QiboCMS v7 and earlier via a flaw in the embedded editor component (ewebeditor 3.1.1 / kindeditor.js). The vulnerability allows remote attackers to inject commands through HTTP requests, enabling Cross Site Scripting (XSS) that can lead to arbitrary code execution ...

Qibosoft QiboCMS 跨站脚本漏洞

Qibo QiboCMS is a software application of China Qibo Qibo company. A website building CMS. A cross-site scripting vulnerability exists in Qibosoft QiboCMS v7 and earlier versions, which allows remote attackers to execute arbitrary code or obtain sensitive information by injecting arbitrary comman...