EUVD-2025-31491

Malicious code in bioql PyPI...

EUVD-2025-11290

Malicious code in bioql PyPI...

CVE-2025-11138

A vulnerability was found in mirweiye wenkucms up to 3.4. This impacts the function createPathOne of the file app/common/common.php. The manipulation results in os command injection. The attack may be launched remotely. The exploit has been made public and could be used...

CVE-2025-11138

A vulnerability was found in mirweiye wenkucms up to 3.4. This impacts the function createPathOne of the file app/common/common.php. The manipulation results in os command injection. The attack may be launched remotely. The exploit has been made public and could be used...

CVE-2025-11138 mirweiye wenkucms common.php createPathOne os command injection

A vulnerability was found in mirweiye wenkucms up to 3.4. This impacts the function createPathOne of the file app/common/common.php. The manipulation results in os command injection. The attack may be launched remotely. The exploit has been made public and could be used...

CVE-2025-11138 mirweiye wenkucms common.php createPathOne os command injection

A vulnerability was found in mirweiye wenkucms up to 3.4. This impacts the function createPathOne of the file app/common/common.php. The manipulation results in os command injection. The attack may be launched remotely. The exploit has been made public and could be used...

PT-2025-39806

Name of the Vulnerable Software and Affected Versions mirweiye wenkucms versions up to 3.4 Description A flaw exists that allows for remote operating system command injection. This occurs due to manipulation of the createPathOne function within the app/common/common.php file. The exploit has been...

CVE-2025-11138: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in mirweiye wenkucms up to 3.4. This impacts the function createPathOne of the file app/common/common.php. The manipulation results in os command injection. The attack may be launched remotely. The exploit has been made public and could be used...

CVE-2025-3688 mirweiye Seven Bears Library CMS Background Management Page cross site scripting

A vulnerability, which was classified as problematic, was found in mirweiye Seven Bears Library CMS 2023. This affects an unknown part of the component Background Management Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

PT-2025-16590

Name of the Vulnerable Software and Affected Versions mirweiye Seven Bears Library CMS version 2023 Description A problematic issue was found in the Background Management Page component, leading to cross-site scripting. The manipulation can be initiated remotely. Recommendations For mirweiye Seve...

PT-2025-16625 · Unknown · Mirweiye Seven Bears Library Cms

Name of the Vulnerable Software and Affected Versions: mirweiye Seven Bears Library CMS version 2023 Description: A vulnerability was found in the Add Link Handler component, which can lead to server-side request forgery. The manipulation can be launched remotely. Recommendations: For mirweiye...

Seven Bears Library CMS 安全漏洞

Seven Bears Library CMS is a content management system by mirweiye individual developer. A security vulnerability exists in Seven Bears Library CMS version 2023, which stems from the Add Link Handler component being susceptible to server-side request forgery attacks...

CVE-2025-3688: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in mirweiye Seven Bears Library CMS 2023. This affects an unknown part of the component Background Management Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-3691: Server-Side Request Forgery (SSRF)

A vulnerability was found in mirweiye Seven Bears Library CMS 2023. It has been classified as problematic. Affected is an unknown function of the component Add Link Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been...

File Upload Vulnerability in Beijing Milwaukee Technology Company's Document Library System (Open Source Version)

Library system open source version is a document sharing, selling library CMS system . A file upload vulnerability exists in the open-source version of the library system of Beijing MirWeiye Technology Company, which can be exploited by an attacker to upload malicious files to obtain server contr...