EUVD-2024-52741

Malicious code in bioql PyPI...

EUVD-2025-13457

Malicious code in bioql PyPI...

CVE-2024-55089

Rhymix before 2.1.24 is vulnerable to Server-Side Request Forgery SSRF in the background import data function because XML documents may contain external entities...

CVE-2025-45242

Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the procFileAdminEditImage method in /file/file.admin.controller.php...

CVE-2025-45242

Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the procFileAdminEditImage method in /file/file.admin.controller.php...

CVE-2025-45242

Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the procFileAdminEditImage method in /file/file.admin.controller.php...

CVE-2025-45242

Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the procFileAdminEditImage method in /file/file.admin.controller.php...

CVE-2025-45242

Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the procFileAdminEditImage method in /file/file.admin.controller.php...

PT-2025-19730

Name of the Vulnerable Software and Affected Versions Rhymix version 2.1.22 Description The issue is related to an arbitrary file deletion vulnerability. This vulnerability can be exploited via the procFileAdminEditImage method in the /file/file.admin.controller.php file. Recommendations For Rhym...

Rhymix security vulnerabilities

Rhymix is an open source CMS and framework from Rhymix Inc. A security vulnerability exists in Rhymix version v2.1.22, which stems from improper handling of the procFileAdminEditImage method in /file/file.admin.controller.php, which could result in the deletion of arbitrary files...

CVE-2025-45242

Rhymix version v2.1.22 contains an arbitrary file deletion vulnerability originating from the procFileAdminEditImage method within the /file/file.admin.controller.php file. Improper handling in this component allows an attacker to delete arbitrary files on the system. As a mitigation, it is recom...

CVE-2025-45242: Insecure Storage of Sensitive Information

Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the procFileAdminEditImage method in /file/file.admin.controller.php...

CVE-2025-45242

Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the procFileAdminEditImage method in /file/file.admin.controller.php...

CVE-2025-45242

Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the procFileAdminEditImage method in /file/file.admin.controller.php...

CVE-2024-55089

Rhymix before 2.1.24 is vulnerable to Server-Side Request Forgery SSRF in the background import data function because XML documents may contain external entities...

CVE-2024-55089

Rhymix before 2.1.24 is vulnerable to Server-Side Request Forgery SSRF in the background import data function because XML documents may contain external entities...

PT-2024-36476

Name of the Vulnerable Software and Affected Versions Rhymix version 2.1.19 Description The issue is related to Server-Side Request Forgery SSRF in the background import data function. This means that an attacker could potentially forge requests from the server, leading to unauthorized access to...

CVE-2024-55089

Rhymix before 2.1.24 is vulnerable to Server-Side Request Forgery SSRF in the background import data function because XML documents may contain external entities...

CVE-2024-55089: Server-Side Request Forgery (SSRF)

Rhymix before 2.1.24 is vulnerable to Server-Side Request Forgery SSRF in the background import data function because XML documents may contain external entities...

CVE-2024-55089

Rhymix, an open source CMS and framework , is vulnerable to Server-Side Request Forgery (SSRF) in versions prior to 2.1.24 . The root cause is the background import data function , which fails to properly handle XML documents containing external entities . An attacker could potentially forge requ...