EUVD-2023-57375

Malicious code in bioql PyPI...

EUVD-2023-33353

Malicious code in bioql PyPI...

EUVD-2025-21373

Malicious code in bioql PyPI...

EUVD-2023-43911

Malicious code in bioql PyPI...

CVE-2025-51818

CVE-2025-51818 affects MCCMS 2.7.0; Backups.php allows arbitrary file deletion and can enable arbitrary command execution. Root cause and affected component are described across multiple sources (e.g., Red Hat, PT Security, NVD). No remediation/version fix details are provided in the connected do...

CVE-2025-51818

MCCMS 2.7.0 is vulnerable to Arbitrary file deletion in the Backups.php component. This allows an attacker to execute arbitrary commands...

PT-2025-32179 · Mccms · Mccms

Name of the Vulnerable Software and Affected Versions: MCCMS version 2.7.0 Description: MCCMS v2.7.0 contains a Server-Side Request Forgery SSRF vulnerability located in the index method of the sysappscontrollersapiGf.php file. The vulnerability occurs when processing the pic parameter. The pic...

CVE-2025-51651

An authenticated arbitrary file download vulnerability in the component /admin/Backups.php of Mccms v2.7.0 allows attackers to download arbitrary files via a crafted GET request...

PT-2025-29491 · Mccms · Mccms

Name of the Vulnerable Software and Affected Versions: Mccms version 2.7.0 Description: An authenticated arbitrary file download issue exists in the /admin/Backups.php component. Attackers can download arbitrary files by sending a crafted GET request. Recommendations: Apply a fix for Mccms versio...

CVE-2023-5029

A vulnerability, which was classified as critical, was found in mccms 2.6. This affects an unknown part of the file /category/order/hits/copyright/46/finish/1/list/1. The manipulation with the input '"1 leads to sql injection. The exploit has been disclosed to the public and may be used. The...

CVE-2023-3235

A vulnerability was found in mccms up to 2.6.5. It has been rated as critical. Affected by this issue is the function picapi of the file sys/apps/controllers/admin/Comic.php. The manipulation of the argument url leads to server-side request forgery. The attack may be launched remotely. The exploi...

CVE-2023-29815

mccms v2.6.3 is vulnerable to Cross Site Request Forgery CSRF...