44 matches found
PT-2026-104490
Name of the Vulnerable Software and Affected Versions ProfilePress versions prior to 4.17.5 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected Cross-Site Scripting. This occurs when a malicious filename is supplied to the ppress...
EUVD-2025-30255
Malicious code in bioql PyPI...
EUVD-2025-4568
Malicious code in bioql PyPI...
EUVD-2025-30248
Malicious code in bioql PyPI...
CVE-2025-54815
Server-side template injection SSTI vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes...
CVE-2025-52159
Hardcoded credentials in default configuration of PPress 0.0.9...
CVE-2025-54761
An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie...
PPress 安全漏洞
PPress is a Python based blog CMS system by yandaozi individual developer. A security vulnerability exists in PPress version 0.0.9, which originates from server-side template injection and could lead to the execution of arbitrary code...
PPress 安全漏洞
PPress is a Python based blog CMS system by yandaozi individual developer. A security vulnerability exists in PPress version 0.0.9, which stems from a specially crafted session cookie that may result in elevated privileges...
PPress 安全漏洞
PPress is a Python-based blogging CMS system by the individual developer yandaozi. A security vulnerability exists in PPress version 0.0.9, which stems from hard-coded credentials included in the default configuration...
CVE-2025-52159
Hardcoded credentials in default configuration of PPress 0.0.9...
CVE-2025-54815
Server-side template injection SSTI vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes...
CVE-2025-52159
Hardcoded credentials in default configuration of PPress 0.0.9...
CVE-2025-54761
An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie...
CVE-2025-54761
A security vulnerability exists in PPress version 0.0.9 (specifically 0.0.9-beta ) that allows attackers to perform session forgery , leading to privilege escalation . The root cause involves the processing of a crafted session cookie . While the vulnerability is confirmed, the documents state th...
CVE-2025-54815
A Server-side Template Injection (SSTI) vulnerability exists in PPress version 0.0.9 (and 0.0.9-beta), a Python-based blog CMS. The root cause allows attackers to execute arbitrary code by providing crafted themes . This vulnerability is part of a chain that can lead to remote code execution. Cur...
CVE-2025-54815
Server-side template injection SSTI vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes...
PT-2025-38618
Name of the Vulnerable Software and Affected Versions PPress version 0.0.9 Description PPress is susceptible to a server-side template injection SSTI issue. This allows attackers to execute arbitrary code through specially crafted themes. Recommendations At the moment, there is no information abo...
