Lucene search
K

8 matches found

VulnCheck KEV
VulnCheck KEV
added 2026/01/31 12:0 a.m.8 views

VulnCheck KEV: CVE-2025-10211

A security vulnerability has been detected in yanyutao0402 ChanCMS 3.3.0. The affected element is the function CollectController of the file /cms/collect/getArticle. The manipulation of the argument taskUrl leads to server-side request forgery. The attack may be initiated remotely. The exploit ha...

6.5CVSS5.4AI score0.05966EPSS
In wildExploits0References11
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-27613

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.05966EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/09/12 8:47 p.m.3 views

CVE-2025-10211

A security vulnerability has been detected in yanyutao0402 ChanCMS 3.3.0. The affected element is the function CollectController of the file /cms/collect/getArticle. The manipulation of the argument taskUrl leads to server-side request forgery. The attack may be initiated remotely. The exploit ha...

6.5CVSS6.6AI score0.05966EPSS
Exploits0References1
NVD
NVD
added 2025/09/10 8:15 p.m.3 views

CVE-2025-10211

A security vulnerability has been detected in yanyutao0402 ChanCMS 3.3.0. The affected element is the function CollectController of the file /cms/collect/getArticle. The manipulation of the argument taskUrl leads to server-side request forgery. The attack may be initiated remotely. The exploit ha...

6.5CVSS0.05966EPSS
Exploits0References5
OSV
OSV
added 2025/09/10 8:15 p.m.1 views

CVE-2025-10211

A security vulnerability has been detected in yanyutao0402 ChanCMS 3.3.0. The affected element is the function CollectController of the file /cms/collect/getArticle. The manipulation of the argument taskUrl leads to server-side request forgery. The attack may be initiated remotely. The exploit ha...

5.3CVSS5.5AI score
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/09/10 12:0 a.m.2 views

PT-2025-37096

Name of the Vulnerable Software and Affected Versions: ChanCMS version 3.3.0 Description: A security issue has been identified in ChanCMS. The CollectController function within the /cms/collect/getArticle file is susceptible to server-side request forgery SSRF through manipulation of the taskUrl...

6.5CVSS6.3AI score0.05966EPSS
Exploits0References8
OSV
OSV
added 2025/07/27 9:15 a.m.0 views

CVE-2025-8227

A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /collect/getArticle. The manipulation of the argument taskUrl leads to deserialization. The attack can be launched remotely. The...

9.8CVSS5.4AI score
Exploits0References6
CNNVD
CNNVD
added 2025/07/27 12:0 a.m.2 views

ChanCMS 代码问题漏洞

ChanCMS is a content management system by Chinese yanyutao0402 individual developer. A code issue vulnerability exists in ChanCMS 3.1.2 and earlier versions, which originates from the wrong operation of the parameter taskUrl in the file /collect/getArticle leading to deserialization...

9.8CVSS6.5AI score0.00454EPSS
Exploits1References8
Rows per page
Query Builder