EUVD-2025-11902

Malicious code in bioql PyPI...

CVE-2025-29058

An issue in Qimou CMS v.3.34.0 allows a remote attacker to execute arbitrary code via the upgrade.php component...

CVE-2025-29058

An issue in Qimou CMS v.3.34.0 allows a remote attacker to execute arbitrary code via the upgrade.php component...

CVE-2025-29058

An issue in Qimou CMS v.3.34.0 allows a remote attacker to execute arbitrary code via the upgrade.php component...

CVE-2025-29058

Summary: CVE-2025-29058 concerns Qimou CMS v3.34.0 where the upgrade.php component enables remote code execution by a malicious actor, as supported by multiple sources in the connected set. What is affected: Qimou CMS version 3.34.0, upgrade.php component. Root cause: insecure handling in upgrade...

PT-2025-17343 · Qimou Cms · Qimou Cms

Name of the Vulnerable Software and Affected Versions: Qimou CMS version 3.34.0 Description: An issue in Qimou CMS allows a remote attacker to execute arbitrary code via the upgrade.php component. Recommendations: For Qimou CMS version 3.34.0, consider disabling the upgrade.php component until a...

CVE-2025-29058

An issue in Qimou CMS v.3.34.0 allows a remote attacker to execute arbitrary code via the upgrade.php component...