PT-2026-49307

Name of the Vulnerable Software and Affected Versions Discuz! X5.0 versions 20260320 through 20260501 Description An authentication bypass allows unauthenticated remote attackers to gain unauthorized access to database backup and restore functionality. This is possible due to a shared cryptograph...

EUVD-2026-11751

wpDiscuz before 7.6.47 contains a cross-site scripting vulnerability that allows attackers to inject malicious code through unescaped attachment URLs in HTML output by exploiting the WpdiscuzHelperUpload class. Attackers can craft malicious attachment records or filter hooks to inject arbitrary...

CVE-2018-14729

The database backup feature in upload/source/admincp/admincpdb.php in Discuz! 2.5 and 3.4 allows remote attackers to execute arbitrary PHP code...

EUVD-2008-6916

Malware in sbrugna...

EUVD-2008-3540

Malware in sbrugna...

EUVD-2018-17148

Malware in sbrugna...

EUVD-2018-2371

Malware in sbrugna...

EUVD-2018-12981

Malware in sbrugna...

EUVD-2018-12979

Malware in sbrugna...

EUVD-2018-17110

Malware in sbrugna...

EUVD-2018-17041

Malware in sbrugna...

EUVD-2006-5546

Malware in sbrugna...

EUVD-2018-11153

Malware in sbrugna...

EUVD-2008-6917

Malware in sbrugna...

EUVD-2009-3168

Malware in sbrugna...

EUVD-2018-17149

Malware in sbrugna...

EUVD-2004-0254

Malware in sbrugna...

EUVD-2018-2372

Malware in sbrugna...

EUVD-2025-21921

Malicious code in bioql PyPI...

CVE-2025-7803

A vulnerability was found in descreekert wx-discuz up to 12bd4745c63ec203cb32119bf77ead4a923bf277. It has been classified as problematic. This affects the function validToken of the file /wx.php. The manipulation of the argument echostr leads to cross site scripting. It is possible to initiate th...