EUVD-2025-26424

Malicious code in bioql PyPI...

CVE-2025-55824

ModStartCMS v9.5.0 has an arbitrary file write vulnerability, which allows attackers to write malicious files and execute malicious commands to obtain sensitive data on the server...

CVE-2025-55824

ModStartCMS v9.5.0 has an arbitrary file write vulnerability, which allows attackers to write malicious files and execute malicious commands to obtain sensitive data on the server...

CVE-2025-55824

ModStartCMS v9.5.0 has an arbitrary file write vulnerability, which allows attackers to write malicious files and execute malicious commands to obtain sensitive data on the server...

CVE-2025-55824

ModStartCMS v9.5.0 has an arbitrary file write vulnerability, which allows attackers to write malicious files and execute malicious commands to obtain sensitive data on the server...

PT-2025-35593

Name of the Vulnerable Software and Affected Versions: ModStartCMS version 9.5.0 Description: ModStartCMS version 9.5.0 contains an arbitrary file write issue. This allows attackers to write malicious files and execute malicious commands, potentially leading to the compromise of sensitive data on...

ModStartCMS 安全漏洞

ModStartCMS is a Laravel-based modular extremely fast development framework from ModStart. A security vulnerability exists in ModStartCMS version v9.5.0, which originates from an arbitrary file write and could lead to the execution of malicious commands to obtain sensitive data...

CVE-2025-55824

CVE-2025-55824 relates to ModStartCMS v9.5.0, which is affected by an arbitrary file-write vulnerability. The vulnerability enables an attacker to write arbitrary files on the server and, as described in sources, execute malicious commands to obtain sensitive data. The CVE’s metrics indicate a ne...

File Write Vulnerability in ModStartCMS of Xi'an Yan Yan Information Technology Co.

ModStartCMS is a modular content management system based on the Laravel framework. A file write vulnerability exists in ModStartCMS, which can be exploited by attackers to gain server privileges...

CVE-2024-46331

ModStartCMS v8.8.0 was discovered to contain an open redirect vulnerability in the redirect parameter at /admin/login. This vulnerability allows attackers to redirect users to an arbitrary website via a crafted URL...

CVE-2024-46331

ModStartCMS v8.8.0 was discovered to contain an open redirect vulnerability in the redirect parameter at /admin/login. This vulnerability allows attackers to redirect users to an arbitrary website via a crafted URL...

CVE-2024-46331

ModStartCMS v8.8.0 was discovered to contain an open redirect vulnerability in the redirect parameter at /admin/login. This vulnerability allows attackers to redirect users to an arbitrary website via a crafted URL...

CVE-2024-46331

ModStartCMS v8.8.0 was discovered to contain an open redirect vulnerability in the redirect parameter at /admin/login. This vulnerability allows attackers to redirect users to an arbitrary website via a crafted URL...

PT-2024-31962 · Unknown · Modstartcms

Name of the Vulnerable Software and Affected Versions: ModStartCMS version 8.8.0 Description: The issue allows attackers to redirect users to an arbitrary website via a crafted URL, exploiting an open redirect vulnerability in the redirect parameter at the "/admin/login" API endpoint...

CVE-2024-46331

ModStartCMS v8.8.0 is affected by an open redirect vulnerability in the redirect parameter at /admin/login. The issue can redirect users to an arbitrary URL. Affected software: ModStartCMS 8.8.0. Root cause: open redirection via the redirect parameter. Impact: potential credential/phishing or use...

ModStartCMS 安全漏洞

ModStartCMS is a Laravel-based modular extremely fast development framework from ModStart. A security vulnerability exists in ModStartCMS version v8.8.0, which stems from an open redirection issue in the redirection parameter of /admin/login, which allows an attacker to redirect users to arbitrar...

CVE-2024-46331

ModStartCMS v8.8.0 was discovered to contain an open redirect vulnerability in the redirect parameter at /admin/login. This vulnerability allows attackers to redirect users to an arbitrary website via a crafted URL...