EUVD-2025-33936

Malicious code in simple-app-theme npm...

MAL-2025-48347 Malicious code in simple-app-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12841bf7b69cb4d4bbfe8fe7d87b976164b92187dae534f07331b5025779b542 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in simple-app-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12841bf7b69cb4d4bbfe8fe7d87b976164b92187dae534f07331b5025779b542 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Plone code issues and vulnerabilities

Plone is the Plone Foundation's open source content management system running on the Zope application server. A server-side request forgery vulnerability exists in Plone 5.2.4 and earlier versions. An attacker can exploit this vulnerability to initiate a server-side request using the lxml parser...

Fiyo CMS Arbitrary File Read Vulnerability

Fiyo CMS is a content management system CMS for creating CMS templates. An arbitrary file read vulnerability exists in the dapur/apps/apptheme/libs/checkfile.php file in Fiyo CMS version 2.0.7. An attacker can exploit this vulnerability to obtain sensitive information...

CVE-2017-17104

Fiyo CMS 2.0.7 has an arbitrary file read vulnerability in dapur/apps/apptheme/libs/checkfile.php via $GET'src' or $GET'name'...

PT-2017-17853

Name of the Vulnerable Software and Affected Versions Fiyo CMS versions 2.x through 2.0.7 Description The issue allows attackers to upload a webshell via the content parameter to the "/dapur/apps/app theme/libs/save file.php" API endpoint and then execute code. Recommendations For Fiyo CMS versio...