EUVD-2023-34226

Malicious code in bioql PyPI...

EUVD-2024-51416

Malicious code in bioql PyPI...

EUVD-2025-5472

Malicious code in bioql PyPI...

CVE-2024-13194

A vulnerability was found in Sucms 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/adminmembers.php?ac=search. The manipulation of the argument uid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed t...

CVE-2023-2768

A vulnerability was found in Sucms 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file adminads.php?action=add. The manipulation of the argument intro leads to cross site scripting. The attack may be launched remotely. The exploit has been...

CVE-2025-25760

A Server-Side Request Forgery SSRF in the component adminwebgather.php of SUCMS v1.0 allows attackers to access internal data and services via a crafted GET request...

CVE-2025-25759

An issue in the component admintemplate.php of SUCMS v1.0 allows attackers to execute a directory traversal and arbitrary file deletion via a crafted GET request...

CVE-2025-25759

An issue in the component admintemplate.php of SUCMS v1.0 allows attackers to execute a directory traversal and arbitrary file deletion via a crafted GET request...

CVE-2025-25760

A Server-Side Request Forgery SSRF in the component adminwebgather.php of SUCMS v1.0 allows attackers to access internal data and services via a crafted GET request...

CVE-2025-25760

A Server-Side Request Forgery SSRF in the component adminwebgather.php of SUCMS v1.0 allows attackers to access internal data and services via a crafted GET request...

CVE-2025-25759

An issue in the component admintemplate.php of SUCMS v1.0 allows attackers to execute a directory traversal and arbitrary file deletion via a crafted GET request...

CVE-2025-25760

A Server-Side Request Forgery SSRF in the component adminwebgather.php of SUCMS v1.0 allows attackers to access internal data and services via a crafted GET request...

PT-2025-8945

Name of the Vulnerable Software and Affected Versions SUCMS version 1.0 Description A Server-Side Request Forgery SSRF issue in the admin webgather.php component allows attackers to access internal data and services by sending a crafted GET request. Recommendations For SUCMS version 1.0, as a...

PT-2025-8944

Name of the Vulnerable Software and Affected Versions SUCMS version 1.0 Description The issue allows attackers to execute a directory traversal and arbitrary file deletion via a crafted GET request. This is due to a problem in the component admin template.php. Recommendations For SUCMS version 1....

CVE-2025-25760: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF in the component adminwebgather.php of SUCMS v1.0 allows attackers to access internal data and services via a crafted GET request...

CVE-2025-25760

SUCMS v1.0 is affected by a Server-Side Request Forgery (SSRF) vulnerability in the admin_webgather.php component. Attackers can exploit this by sending a crafted GET request to access internal data and services. No official patch is currently available; as a temporary workaround, it is recommend...

CVE-2025-25759

The SUCMS v1.0 content management system is vulnerable to a directory traversal and arbitrary file deletion flaw located in the admin_template.php component. Attackers can exploit this by sending a crafted GET request . While no specific patch version is provided, the recommended workaround is to...

CVE-2025-25759

An issue in the component admintemplate.php of SUCMS v1.0 allows attackers to execute a directory traversal and arbitrary file deletion via a crafted GET request...

CVE-2025-25760

A Server-Side Request Forgery SSRF in the component adminwebgather.php of SUCMS v1.0 allows attackers to access internal data and services via a crafted GET request...

Sucms security vulnerabilities

Sucms is a completely open source and free PHP+MYSQL system by China Subianji team. A security vulnerability exists in Sucms v1.0, which stems from a server-side request forgery in the adminwebgather.php component that allows access to internal data and services...