📄 C‑Bitrix 25.100.500 Translate Module Arbitrary File Upload

C‑Bitrix version 25.100.500 proof of concept exploit that demonstrates an arbitrary file upload vulnerability in the translate module. ============================================================================================================================================= | Title : C‑Bitrix...

PT-2025-52212

Name of the Vulnerable Software and Affected Versions Bitrix24 versions prior to 25.100.301 Description Remote Code Execution is possible because an actor with SOURCE/WRITE permissions for the Translate Module can upload and execute code by sending a PHP file and a .htaccess file. The supplier...

📄 1C-Bitrix 25.100.500 Remote Code Execution

1C-Bitrix versions 25.100.500 and below have a vulnerability that is located within the Translate Module, which allows users to upload and extract archive files into a temporary directory. However, the application fails to properly verify the contents of these archives before extracting them. Thi...

EUVD-2006-2476

Malware in sbrugna...

EUVD-2005-1997

Malware in sbrugna...

EUVD-2005-1998

Malware in sbrugna...

EUVD-2013-6590

Malware in sbrugna...

EUVD-2015-8240

Malware in sbrugna...

EUVD-2015-8239

Malware in sbrugna...

EUVD-2006-2479

Malware in sbrugna...

EUVD-2006-2477

Malware in sbrugna...

EUVD-2006-2478

Malware in sbrugna...

EUVD-2017-11129

Malware in sbrugna...

EUVD-2015-8241

Malware in sbrugna...

EUVD-2022-46929

Malicious code in bioql PyPI...

Vulnerability of the iblock module in the 1C-Bitrix website management system: Website management that allows attackers to execute arbitrary code

Vulnerability of the iblock module in the Content Management System CMS of 1C-Bitrix: Website management is related to incorrect code generation. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into any PHP script executed during the creation of new information...

Vulnerability of the iblock module in the 1C-Bitrix website management system: Website management that allows attackers to gain unauthorized access to protected information

Vulnerability of the iblock module in the Content Management System CMS of 1C-Bitrix: Website management is associated with errors in processing the relative path to the catalog. Exploiting this vulnerability can allow unauthorized users to gain unauthorized access to protected information...

Vulnerability of the main and fileman modules of the 1C-Bitrix website management system: Website management that allows attackers to gain unauthorized access to configuration and executable files

Vulnerability of the main and fileman modules of the 1C-Bitrix website management system: Website management involves insecure handling of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to configuration and executable files...

Vulnerability of the main and fileman modules of the 1C-Bitrix website management system: Website management that allows a hacker to gain unauthorized access to protected information beyond the web directory

Vulnerability of the main and fileman modules of the CMS system: Website management is related to vulnerabilities in path name restrictions for directories. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information beyond the web directory...

Vulnerability of the iblock module in the 1C-Bitrix website management system: Website management that allows attackers to gain unauthorized access to protected information

Vulnerability of the iblock module in the Content Management System CMS of 1C-Bitrix: Website management is associated with errors in processing the relative path to the catalog. Exploiting this vulnerability can allow unauthorized users to gain unauthorized access to protected information...