📄 Sitecore Experience Manager / Experience Platform 10.1 Shell Upload / Hardcoded Credentials

Proof of concept exploit for a remote code execution vulnerability chain affecting Sitecore Experience Platform versions 10.x combining hardcoded credentials with file upload vulnerabilities for complete system compromise...

Sitecore Experience Manager Deserialization RCE

The vulnerability of the Sitecore Experience Manager XM, Experience Platform XP, and the Experience Commerce XC platform for personalized purchasing processes is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code an...

Sitecore Experience Manager Path Traversal RCE

The vulnerability of the Sitecore Experience Manager XM, Experience Platform XP, and the Experience Commerce XC platform for personalized purchasing processes is related to errors in processing the relative path to the catalog. Exploiting this vulnerability can allow an attacker to gain access to...

Sitecore Experience Manager XP Privilege Escalation

The vulnerability of Sitecore Experience Manager XM and Experience Platform XP management systems is related to the use of strictly encrypted user credentials. Exploiting this vulnerability could allow an attacker to gain access to a user account with administrative privileges...

Sitecore Experience Platform Code Execution

The vulnerability of the Sitecore Experience Platform XP and Sitecore Experience Manager XM content management systems is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

EUVD-2025-18524

Malicious code in bioql PyPI...

EUVD-2025-22720

Malicious code in bioql PyPI...

EUVD-2025-26499

Malicious code in bioql PyPI...

EUVD-2025-26500

Malicious code in bioql PyPI...

EUVD-2025-22719

Malicious code in bioql PyPI...

EUVD-2025-26501

Malicious code in bioql PyPI...

CVE-2025-53692: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Sitecore Sitecore Experience Manager XM, Sitecore Experience Platform XP allows Cross-Site Scripting XSS.This issue affects Sitecore Experience Manager XM: from 9.2 through 10.4; Experience...

Sitecore Experience Platform and Sitecore Experience Manager security vulnerabilities

Sitecore Experience Platform XP and Sitecore Experience Manager XM are both products of Sitecore, a Danish company.Sitecore Experience Platform is a suite of customer digital experience platforms.Sitecore Sitecore Experience Platform is a customer digital experience platform and Sitecore Experien...

PT-2025-38666

Name of the Vulnerable Software and Affected Versions Sitecore Experience Manager XM versions 9.2 through 10.4 Sitecore Experience Platform XP versions 9.2 through 10.4 Description The software contains an Improper Neutralization of Input During Web Page Generation, which allows for Cross-Site...

CVE-2025-53690

Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager XM, Sitecore Experience Platform XP allows Code Injection.This issue affects Experience Manager XM: through 9.0; Experience Platform XP: through 9.0...

CVE-2025-53694

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Sitecore Sitecore Experience Manager XM, Sitecore Experience Platform XP.This issue affects Sitecore Experience Manager XM: from 9.2 through 10.4; Experience Platform XP: from 9.2 through 10.4...

CVE-2025-53691

Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager XM, Sitecore Experience Platform XP allows Remote Code Execution RCE.This issue affects Experience Manager XM: from 9.0 through 9.3, from 10.0 through 10.4; Experience Platform XP: from 9.0 through 9.3, from 10.0 throu...

CVE-2025-53693

Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Sitecore Sitecore Experience Manager XM, Sitecore Experience Platform XP allows Cache Poisoning.This issue affects Sitecore Experience Manager XM: from 9.0 through 9.3, from 10.0 through 10.4;...

Exploit for Deserialization of Untrusted Data in Sitecore Experience_Commerce

CVE-2025-53690 Deserialization of Untrusted Data vulnerabilit...

CVE-2025-53690

Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager XM, Sitecore Experience Platform XP allows Code Injection.This issue affects Experience Manager XM: through 9.0; Experience Platform XP: through 9.0...