23 matches found
CVE-2026-90710
A vulnerability was determined in taisan tarzan-cms 1.0.0. This issue affects the function openConnection of the file com/tarzan/cms/modules/admin/service/biz/ThemeService.java of the component Theme Download Function. Executing a manipulation of the argument httpUrl can lead to server-side reque...
EUVD-2026-77430
A vulnerability was determined in taisan tarzan-cms 1.0.0. This issue affects the function openConnection of the file com/tarzan/cms/modules/admin/service/biz/ThemeService.java of the component Theme Download Function. Executing a manipulation of the argument httpUrl can lead to server-side reque...
CVE-2026-90710 taisan tarzan-cms Theme Download Function ThemeService.java openConnection server-side request forgery
A vulnerability was determined in taisan tarzan-cms 1.0.0. This issue affects the function openConnection of the file com/tarzan/cms/modules/admin/service/biz/ThemeService.java of the component Theme Download Function. Executing a manipulation of the argument httpUrl can lead to server-side reque...
CVE-2026-90710
CVE-2026-90710 is a Server-Side Request Forgery (SSRF) vulnerability in taisan tarzan-cms version 1.0.0 . The flaw resides in the openConnection function within the Theme Download Function component, specifically in the file com/tarzan/cms/modules/admin/service/biz/ThemeService.java. By manipulat...
CVE-2026-90710 taisan tarzan-cms Theme Download Function ThemeService.java openConnection server-side request forgery
A vulnerability was determined in taisan tarzan-cms 1.0.0. This issue affects the function openConnection of the file com/tarzan/cms/modules/admin/service/biz/ThemeService.java of the component Theme Download Function. Executing a manipulation of the argument httpUrl can lead to server-side reque...
PT-2026-91172
A vulnerability was determined in taisan tarzan-cms 1.0.0. This issue affects the function openConnection of the file com/tarzan/cms/modules/admin/service/biz/ThemeService.java of the component Theme Download Function. Executing a manipulation of the argument httpUrl can lead to server-side reque...
EUVD-2025-2011
Malicious code in bioql PyPI...
EUVD-2024-51279
Malicious code in bioql PyPI...
CVE-2024-13022
A vulnerability, which was classified as critical, was found in taisan tarzan-cms 1.0.0. This affects the function UploadResponse of the file src/main/java/com/tarzan/cms/modules/admin/controller/common/UploadController.java of the component Article Management. The manipulation of the argument fi...
CVE-2025-1113
A vulnerability was found in taisan tarzan-cms up to 1.0.0. It has been rated as critical. This issue affects the function upload of the file /adminthemes of the component Add Theme Handler. The manipulation leads to deserialization. The attack may be initiated remotely. The exploit has been...
CVE-2025-1113
A vulnerability was found in taisan tarzan-cms up to 1.0.0. It has been rated as critical. This issue affects the function upload of the file /adminthemes of the component Add Theme Handler. The manipulation leads to deserialization. The attack may be initiated remotely. The exploit has been...
CVE-2025-1113
A vulnerability was found in taisan tarzan-cms up to 1.0.0. It has been rated as critical. This issue affects the function upload of the file /adminthemes of the component Add Theme Handler. The manipulation leads to deserialization. The attack may be initiated remotely. The exploit has been...
CVE-2025-1113 taisan tarzan-cms Add Theme admin#themes upload deserialization
A vulnerability was found in taisan tarzan-cms up to 1.0.0. It has been rated as critical. This issue affects the function upload of the file /adminthemes of the component Add Theme Handler. The manipulation leads to deserialization. The attack may be initiated remotely. The exploit has been...
CVE-2025-1113
CVE-2025-1113 | A deserialization vulnerability exists in taisan tarzan-cms up to version 1.0.0, triggered by the upload function of the Add Theme Handler at /admin#themes. The issue can be exploited remotely and has been publicly disclosed. NVD shows critical CVSS v3.1 impact (C/H/I/A = High) wi...
CVE-2025-1113 taisan tarzan-cms Add Theme admin#themes upload deserialization
A vulnerability was found in taisan tarzan-cms up to 1.0.0. It has been rated as critical. This issue affects the function upload of the file /adminthemes of the component Add Theme Handler. The manipulation leads to deserialization. The attack may be initiated remotely. The exploit has been...
Tarzan-CMS 安全漏洞
Tarzan-CMS is a modern open source content management system CMS based on the Java technology stack by the Tarzan team. A security vulnerability exists in Tarzan-CMS 1.0.0 and earlier versions, which stems from a deserialization due to the file/adminthemes upload function of the Add Theme Handler...
PT-2025-6008 · Unknown · Taisan Tarzan-Cms
Name of the Vulnerable Software and Affected Versions: taisan tarzan-cms versions up to 1.0.0 Description: This issue affects the function upload of the file "/adminthemes" of the component Add Theme Handler. The manipulation leads to deserialization. The attack may be initiated remotely...
CVE-2024-13022
A vulnerability, which was classified as critical, was found in taisan tarzan-cms 1.0.0. This affects the function UploadResponse of the file src/main/java/com/tarzan/cms/modules/admin/controller/common/UploadController.java of the component Article Management. The manipulation of the argument fi...
CVE-2024-13022 taisan tarzan-cms Article Management UploadController.java UploadResponse unrestricted upload
A vulnerability, which was classified as critical, was found in taisan tarzan-cms 1.0.0. This affects the function UploadResponse of the file src/main/java/com/tarzan/cms/modules/admin/controller/common/UploadController.java of the component Article Management. The manipulation of the argument fi...
CVE-2024-13022
CVE-2024-13022 affects taisan tarzan-cms 1.0.0, specifically the UploadResponse function in UploadController.java (Article Management). The vulnerability arises from manipulation of the file argument, enabling unrestricted uploads and allowing remote initiation. Multiple connected reports confirm...