24 matches found
EUVD-2025-5355
Malicious code in bioql PyPI...
EUVD-2023-48531
Malicious code in bioql PyPI...
CVE-2025-25792
SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the isopen parameter at adminweixin.php...
CVE-2025-25792
SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the isopen parameter at adminweixin.php...
CVE-2025-25792: Improper Neutralization of Special Elements used in a Command
SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the isopen parameter at adminweixin.php...
CVE-2025-25792
The SeaCMS v13.3 web content management system is vulnerable to Remote Code Execution (RCE) due to a flaw in the isopen parameter located at the admin_weixin.php endpoint. An attacker can exploit this vulnerability to execute arbitrary code remotely. To mitigate the risk, it is recommended to res...
SeaCMS 安全漏洞
SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS v13.3 that stems from a Remote Code Execution RCE issue with the isopen parameter in the...
CVE-2025-25792
SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the isopen parameter at adminweixin.php...
SeaCMS admin_weixin.php Command Execution Vulnerability
SeaCMS is an open source content management system based on PHP+MySql technology. A security vulnerability exists in the SeaCMS adminweixin.php processing parameter, which can be exploited by an authenticated remote attacker to submit a special request that can be used to execute arbitrary comman...
CVE-2024-40518
SeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is caused by adminweixin.php directly splicing and writing the user input data into weixin.php without processing it, which allows authenticated attackers to exploit the vulnerability to execute arbitrary commands and obtain...
CVE-2024-40518
SeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is caused by adminweixin.php directly splicing and writing the user input data into weixin.php without processing it, which allows authenticated attackers to exploit the vulnerability to execute arbitrary commands and obtain...
CVE-2024-40518
SeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is caused by adminweixin.php directly splicing and writing the user input data into weixin.php without processing it, which allows authenticated attackers to exploit the vulnerability to execute arbitrary commands and obtain...
SeaCMS 安全漏洞
SeaCMS is an open source content management system based on PHP+MySql technology. A security vulnerability exists in the SeaCMS adminweixin.php processing parameter, which can be exploited by an authenticated remote attacker to submit a special request that can be used to execute arbitrary comman...
CVE-2024-40518
Affected software/components: SeaCMS 12.9; vulnerable file: admin_weixin.php which writes user input directly into weixin.php without processing. Root cause / vulnerability type: Direct splicing/writing of unprocessed user input leading to remote code execution. Impact: Authenticated attackers ca...
CVE-2024-40518: Improper Input Validation
SeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is caused by adminweixin.php directly splicing and writing the user input data into weixin.php without processing it, which allows authenticated attackers to exploit the vulnerability to execute arbitrary commands and obtain...
CVE-2024-40518
SeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is caused by adminweixin.php directly splicing and writing the user input data into weixin.php without processing it, which allows authenticated attackers to exploit the vulnerability to execute arbitrary commands and obtain...
CVE-2023-44847: Improper Control of Generation of Code
An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin Weixin.php component...
CVE-2023-44172
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminweixin.php...