PT-2025-16214 · Wuzhicms · Wuzhi Cms

Name of the Vulnerable Software and Affected Versions: WuzhiCMS version 4.1 Description: A critical issue was found in the Setting Handler component, specifically in the function Set of the file /index.php?m=attachment&f=index& su=wuzhicms&v=set&submit=1. The manipulation of the Setting argument...

WUZHI CMS 注入漏洞

WUZHI CMS is a set of five fingers WUZHI company based on PHP and MySQL open source content management system CMS. WUZHI CMS 4.1 version of an injection vulnerability, the vulnerability stems from improper operation of the parameter Setting in the file / index.php, which may lead to code injectio...

My-Blog-layui 代码注入漏洞

My-Blog-layui is a blog system by ZHENFENG13 individual developer. A code injection vulnerability exists in My-Blog-layui version 1.0, which originates from a cross-site scripting issue in the file /admin/v1/blog/edit...

My-Blog-layui 代码注入漏洞

My-Blog-layui is a blog system by ZHENFENG13 individual developer. A code injection vulnerability exists in My-Blog-layui version 1.0, which originates from a cross-site scripting issue in the file /admin/v1/link/edit...

SAP ERP BW Business Content Code Injection Vulnerability

SAP ERP BW Business Content is a cloud-based e-commerce platform that helps companies create a personalized and seamless buying experience for their customers. SAP ERP BW Business Content suffers from a code injection vulnerability that can be exploited by an attacker to execute arbitrary code...

uzy-ssm-mall 代码注入漏洞

uzy-ssm-mall yuzu cloud e-commerce is an SSM framework by ghostxbh individual developer for building e-commerce, bookstore mall, customer management and so on. A code injection vulnerability exists in uzy-ssm-mall version 1.0.0, which stems from improper manipulation of the parameter productname ...

📄 Langflow AI Remote Code Execution

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

GestioIP 3.5.7 - Stored Cross-Site Scripting (Stored XSS)

Exploit Title: GestioIP 3.5.7 - GestioIP Vulnerability: Auth. Stored Cross-Site Scripting Exploit Author: m4xth0r Maximiliano Belino Author website: https://maxibelino.github.io/ Author email: max.cybersecurity at belino.com GitHub disclosure link:...

Exploit for Code Injection in Ispconfig

CVE-2023-46818 Python Exploit 🔥 Description This Python e...

CVE-2025-32075

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Tabs Extension allows Code Injection.This issue affects Mediawiki - Tabs Extension: from 1.39 through 1.43...

Exploit for Code Injection in Ispconfig

CVE-2023-46818-Exploit This is my own exploit for CVE-2023-468...

CVE-2025-32426

Formie is a Craft CMS plugin for creating forms. Prior to version 2.1.44, it is possible to inject malicious code into the HTML content of an email notification, which is then rendered on the preview. There is no issue when rendering the email via normal means a delivered email. This would requir...

CVE-2024-13861

A code injection vulnerability in the Debian package component of Taegis Endpoint Agent Linux versions older than 1.3.10 allows local users arbitrary code execution as root. Redhat-based systems using RPM packages are not affected...

YouDianCMS 代码注入漏洞

YouDianCMS YouDian CMS is a website builder from China YouDian Company. A code injection vulnerability exists in YouDianCMS version 9.5.21, which originates from a cross-site scripting attack...

YouDianCMS 代码注入漏洞

YouDianCMS YouDian CMS is a website builder from China YouDian Company. A code injection vulnerability exists in YouDianCMS version 9.5.21, which originates from a cross-site scripting attack...

YouDianCMS 代码注入漏洞

YouDianCMS YouDian CMS is a website builder from China YouDian Company. A code injection vulnerability exists in YouDianCMS version 9.5.21, which originates from a cross-site scripting attack...

CVE-2025-32075

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Tabs Extension allows Code Injection.This issue affects Mediawiki - Tabs Extension: from 1.39 through 1.43...

CVE-2025-32075 IP and user agent leaks in Extension:Tabs

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Tabs Extension allows Code Injection.This issue affects Mediawiki - Tabs Extension: from 1.39 through 1.43...

CVE-2025-32075

CVE-2025-32075 concerns the Wikimedia Foundation MediaWiki – Tabs Extension. Affected: versions 1.39–1.43. Issue: Improper input validation enabling Code Injection. Impact metrics indicate low to moderate confidentiality/integrity/availability effects with CVSS v4.0 base score 6.9 (NETWORK attack...

CVE-2025-32075 IP and user agent leaks in Extension:Tabs

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Tabs Extension allows Code Injection.This issue affects Mediawiki - Tabs Extension: from 1.39 through 1.43...