Lucene search
K

2970 matches found

ATTACKERKB
ATTACKERKB
added 2025/12/28 6:2 p.m.3 views

CVE-2025-15148

A flaw has been found in CmsEasy up to 7.7.7. Affected is the function savetempaction in the library /lib/admin/templateadmin.php of the component Backend Template Management Page. Executing a manipulation of the argument content/tempdata can lead to code injection. The attack may be launched...

7.2CVSS5.2AI score0.00028EPSS
Exploits1References4
EUVD
EUVD
added 2025/12/28 12:30 p.m.2 views

EUVD-2025-205503

A vulnerability has been found in shanyu SyCms up to a242ef2d194e8bb249dc175e7c49f2c1673ec921. This issue affects the function addPost of the file Application/Admin/Controller/FileManageController.class.php of the component Administrative Panel. The manipulation leads to code injection. The attac...

5.8CVSS6.5AI score0.00029EPSS
Exploits0References5
NVD
NVD
added 2025/12/28 10:15 a.m.2 views

CVE-2025-15130

A vulnerability has been found in shanyu SyCms up to a242ef2d194e8bb249dc175e7c49f2c1673ec921. This issue affects the function addPost of the file Application/Admin/Controller/FileManageController.class.php of the component Administrative Panel. The manipulation leads to code injection. The attac...

5.8CVSS0.00029EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/12/28 9:32 a.m.2 views

CVE-2025-15130 shanyu SyCms Administrative Panel FileManageController.class.php addPost code injection

A vulnerability has been found in shanyu SyCms up to a242ef2d194e8bb249dc175e7c49f2c1673ec921. This issue affects the function addPost of the file Application/Admin/Controller/FileManageController.class.php of the component Administrative Panel. The manipulation leads to code injection. The attac...

5.8CVSS4.8AI score0.00029EPSS
Exploits0References4
OSV
OSV
added 2025/12/28 9:15 a.m.1 views

CVE-2025-15129

A flaw has been found in ChenJinchuang Lin-CMS-TP5 up to 0.3.3. This vulnerability affects the function Upload of the file application/lib/file/LocalUploader.php of the component File Upload Handler. Executing manipulation of the argument File can lead to code injection. The attack can be execute...

6.3CVSS5.6AI score0.00006EPSS
Exploits0References4
NVD
NVD
added 2025/12/28 9:15 a.m.2 views

CVE-2025-15129

A flaw has been found in ChenJinchuang Lin-CMS-TP5 up to 0.3.3. This vulnerability affects the function Upload of the file application/lib/file/LocalUploader.php of the component File Upload Handler. Executing manipulation of the argument File can lead to code injection. The attack can be execute...

6.5CVSS0.00006EPSS
Exploits0References4
CVE
CVE
added 2025/12/28 9:2 a.m.11 views

CVE-2025-15129

ChenJinchuang Lin-CMS-TP5

6.5CVSS6.7AI score0.00006EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/12/28 12:0 a.m.5 views

PT-2025-53645

Name of the Vulnerable Software and Affected Versions shanyu SyCms versions up to a242ef2d194e8bb249dc175e7c49f2c1673ec921 Description A code injection issue exists in shanyu SyCms. The issue is located in the addPost function within the Application/Admin/Controller/FileManageController.class.php...

5.8CVSS6.8AI score0.00029EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2025/12/23 12:0 a.m.2 views

CVE-2024-57521

SQL Injection vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via the createTable function in SqlUtil.java...

8.4AI score0.0043EPSS
Exploits2References4
RedhatCVE
RedhatCVE
added 2025/12/19 12:37 p.m.3 views

CVE-2025-67850

A flaw was found in moodle. This vulnerability, known as Cross-Site Scripting XSS, occurs due to insufficient checks on user-provided data in the formula editor's arithmetic expression fields. A remote attacker could inject malicious code into these fields. When other users view these expressions...

6.4AI score0.00012EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/12/19 1:39 a.m.3 views

CVE-2025-14856

A security vulnerability has been detected in yproject RuoYi up to 4.8.1. The affected element is an unknown function of the file /monitor/cache/getnames. Such manipulation of the argument fragment leads to code injection. The attack can be executed remotely. The exploit has been disclosed public...

8.8CVSS6.8AI score0.00042EPSS
Exploits1References1
OSV
OSV
added 2025/12/18 2:15 a.m.3 views

CVE-2025-14856

A security vulnerability has been detected in yproject RuoYi up to 4.8.1. The affected element is an unknown function of the file /monitor/cache/getnames. Such manipulation of the argument fragment leads to code injection. The attack can be executed remotely. The exploit has been disclosed public...

8.8CVSS7.1AI score
Exploits0References5
Cvelist
Cvelist
added 2025/12/18 1:32 a.m.24 views

CVE-2025-14856 y_project RuoYi getnames code injection

A security vulnerability has been detected in yproject RuoYi up to 4.8.1. The affected element is an unknown function of the file /monitor/cache/getnames. Such manipulation of the argument fragment leads to code injection. The attack can be executed remotely. The exploit has been disclosed public...

6.5CVSS0.00042EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/12/18 1:32 a.m.6 views

CVE-2025-14856 y_project RuoYi getnames code injection

A security vulnerability has been detected in yproject RuoYi up to 4.8.1. The affected element is an unknown function of the file /monitor/cache/getnames. Such manipulation of the argument fragment leads to code injection. The attack can be executed remotely. The exploit has been disclosed public...

6.5CVSS6.7AI score0.00042EPSS
Exploits1References5
CVE
CVE
added 2025/12/18 1:32 a.m.9 views

CVE-2025-14856

The CVE-2025-14856 entry concerns y_project RuoYi up to version 4.8.1. The vulnerability is due to manipulation of the fragment argument in the file /monitor/cache/getnames, which can lead to code injection. A remote attacker can exploit this, and public exploit information has been disclosed. Af...

8.8CVSS6.7AI score0.00042EPSS
Exploits1References5Affected Software1
EUVD
EUVD
added 2025/12/18 1:32 a.m.3 views

EUVD-2025-204020

A security vulnerability has been detected in yproject RuoYi up to 4.8.1. The affected element is an unknown function of the file /monitor/cache/getnames. Such manipulation of the argument fragment leads to code injection. The attack can be executed remotely. The exploit has been disclosed public...

6.5CVSS6.5AI score0.00042EPSS
Exploits1References5
NVD
NVD
added 2025/12/18 12:16 a.m.4 views

CVE-2025-14837

A vulnerability has been found in ZZCMS 2025. Affected by this issue is the function stripfxg of the file /admin/siteconfig.php of the component Backend Website Settings Module. Such manipulation of the argument icp leads to code injection. The attack can be executed remotely. The exploit has bee...

7.2CVSS0.00047EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.4 views

PT-2025-51988

Name of the Vulnerable Software and Affected Versions y project RuoYi versions up to 4.8.1 Description A security issue exists in y project RuoYi, potentially allowing for remote code injection. The issue is related to manipulation of the fragment argument within an unknown function in the...

8.8CVSS6.3AI score0.00042EPSS
Exploits1References9
Vulnrichment
Vulnrichment
added 2025/12/17 11:32 p.m.3 views

CVE-2025-14837 ZZCMS Backend Website Settings siteconfig.php stripfxg code injection

A vulnerability has been found in ZZCMS 2025. Affected by this issue is the function stripfxg of the file /admin/siteconfig.php of the component Backend Website Settings Module. Such manipulation of the argument icp leads to code injection. The attack can be executed remotely. The exploit has bee...

5.8CVSS6.8AI score0.00047EPSS
Exploits1References4
CVE
CVE
added 2025/12/17 11:32 p.m.11 views

CVE-2025-14837

ZZCMS 2025 has a code injection vulnerability in the Backend Website Settings Module. The stripfxg function in /admin/siteconfig.php mishandles the icp argument, enabling remote code execution. Exploit has been publicly disclosed. Affected: ZZCMS 2025; file: /admin/siteconfig.php; function: strip...

7.2CVSS6.8AI score0.00047EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder