EUVD-2018-10453

Malware in sbrugna...

EUVD-2024-35281

Malicious code in bioql PyPI...

CVE-2024-35324

Douchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php...

CVE-2024-35324

Douchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php...

CVE-2024-35324

Douchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php...

CVE-2024-35324

Douchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php...

PT-2024-26432 · Douchat · Douchat

Name of the Vulnerable Software and Affected Versions: Douchat version 4.0.5 Description: The issue is related to an arbitrary file upload vulnerability. This vulnerability can be exploited via the Public/Plugins/webuploader/server/preview.php endpoint. Recommendations: For Douchat version 4.0.5,...

Douchat 安全漏洞

Douchat is a clean and efficient WeChat development framework from Douxin Douchat. A security vulnerability exists in Douchat version 4.0.5, which originates from an arbitrary file upload vulnerability in the file Public/Plugins/webuploader/server/preview.php...

CVE-2018-18737

An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexmlloadstring. This can also be used for SSRF...

CVE-2018-18737

An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexmlloadstring. This can also be used for SSRF...

Design/Logic Flaw

An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexmlloadstring. This can also be used for SSRF...

CVE-2018-18737

An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexmlloadstring. This can also be used for SSRF...

CVE-2018-18737

CVE-2018-18737 describes an XXE in Douchat 4.0.4 caused by Data\notify.php calling simplexml_load_string, which can also enable SSRF. Affected software: Douchat 4.0.4 (no other versions/products specified). Root cause: improper XML parsing via simplexml_load_string leading to external entity proc...

CVE-2024-35324

Douchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php...