EUVD-2025-5355

Malicious code in bioql PyPI...

CVE-2025-25792

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the isopen parameter at adminweixin.php...

CVE-2025-25792

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the isopen parameter at adminweixin.php...

CVE-2025-25792

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the isopen parameter at adminweixin.php...

CVE-2025-25792: Improper Neutralization of Special Elements used in a Command

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the isopen parameter at adminweixin.php...

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS v13.3 that stems from a Remote Code Execution RCE issue with the isopen parameter in the...

CVE-2025-25792

SeaCMS v13.3 contains a Remote Code Execution (RCE) vulnerability caused by the improper neutralization of special elements used in a command (CWE-77). The flaw exists in the isopen parameter at the admin_weixin.php endpoint, allowing an attacker to execute arbitrary code remotely. Practical cons...

CVE-2025-25792

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the isopen parameter at adminweixin.php...

PT-2025-8714

Name of the Vulnerable Software and Affected Versions SeaCMS version 13.3 Description A remote code execution issue was found in SeaCMS, allowing attackers to execute code remotely via the isopen parameter at the "admin weixin.php" endpoint. Recommendations For SeaCMS version 13.3, consider...

EVERY TIME ONCE _execute FUNCTION COMPLETED NEED TO SET isOpen TO 0. OTHERWISE WE CAN CALL EXECUTE FUNCTIONS MULTIMPLE TIMES.

Lines of code Vulnerability details Impact IN THIS WAY WE CAN CALL AND EXECUTE FUNCTIONS MULTIPLE TIMES . EVERY TIME BEFORE CALL EXECUTE NEED TO CALL INITIALIZE FUNCTIONS. Proof of Concept function executeInput calldata sell, Input calldata buy public payable reentrancyGuard internalCall...

Injecting Fake Updates: Evilgrade

Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates. It comes with pre-made binaries agents, a working default configuration for fast pentests, and has it’s own WebServer and DNSServer modules. Easy to set up new...

Security fix for the ALT Linux 5 package qt4 version 4.5.2-alt6

Sept. 11, 2009 Sergey V Turchin 4.5.2-alt6 - add patch to fix CVE-2009-2700 - patch from kde-qt to add support for isOpen in mysql driver plugin - add patch from MDV to fix qmake wformat patch...