CVE-2021-27230

ExpressionEngine before 5.4.2 and 6.x before 6.0.3 allows PHP Code Injection by certain authenticated users who can leverage Translate::save to write to an lang.php file under the system/user/language directory...

EUVD-2020-5696

Malware in sbrugna...

EUVD-2018-9616

Malware in sbrugna...

EUVD-2017-1250

Malware in sbrugna...

EUVD-2024-37340

Malicious code in bioql PyPI...

CVE-2020-13443

ExpressionEngine before 5.3.2 allows remote attackers to upload and execute arbitrary code in a .php%20 file via Compose Msg, Add attachment, and Save As Draft actions. A user with low privileges member is able to upload this. It is possible to bypass the MIME type check and file-extension check...

PACKET TIDE ExpressionEngine Code Issue Vulnerability

PACKET TIDE ExpressionEngine is the U.S. PACKET TIDE company's set of open source content management system CMS. A security vulnerability exists in PACKET TIDE ExpressionEngine versions prior to 5.3.2. A remote attacker can exploit the vulnerability to execute arbitrary code...