EUVD-2025-11902

Malicious code in bioql PyPI...

CVE-2025-29058

An issue in Qimou CMS v.3.34.0 allows a remote attacker to execute arbitrary code via the upgrade.php component...

CVE-2025-29058

An issue in Qimou CMS v.3.34.0 allows a remote attacker to execute arbitrary code via the upgrade.php component...

CVE-2025-29058

A security vulnerability in Qimou CMS v.3.34.0 allows a remote attacker to achieve arbitrary code execution . The root cause is located within the upgrade.php component. As a remediation measure, it is recommended to disable the upgrade.php component until an official patch is released. Proof-of-...

PT-2025-17343 · Qimou Cms · Qimou Cms

Name of the Vulnerable Software and Affected Versions: Qimou CMS version 3.34.0 Description: An issue in Qimou CMS allows a remote attacker to execute arbitrary code via the upgrade.php component. Recommendations: For Qimou CMS version 3.34.0, consider disabling the upgrade.php component until a...

CVE-2025-29058

An issue in Qimou CMS v.3.34.0 allows a remote attacker to execute arbitrary code via the upgrade.php component...

CVE-2025-29058

An issue in Qimou CMS v.3.34.0 allows a remote attacker to execute arbitrary code via the upgrade.php component...

CVE-2025-29058: Improper Control of Generation of Code

An issue in Qimou CMS v.3.34.0 allows a remote attacker to execute arbitrary code via the upgrade.php component...