EUVD-2025-25830

Malicious code in bioql PyPI...

CVE-2025-52353

An arbitrary code execution vulnerability in Badaso CMS 2.9.11. The Media Manager allows authenticated users to upload files containing embedded PHP code via the file-upload endpoint, bypassing content-type validation. When such a file is accessed via its URL, the server executes the PHP payload,...

CVE-2025-52353

The badaso/core component in Badaso CMS 2.9.11 is vulnerable to Arbitrary Code Execution (ACE) due to improper content-type validation within the Media Manager's file-upload endpoint. Authenticated users can upload files containing embedded PHP code (e.g., a backdoor hidden in a PDF renamed with ...