EUVD-2021-2091

Malware in sbrugna...

EUVD-2022-7514

Malicious code in bioql PyPI...

EUVD-2022-5863

Malicious code in bioql PyPI...

EUVD-2022-0881

Malicious code in bioql PyPI...

EUVD-2025-23628

Malicious code in bioql PyPI...

CVE-2025-50706

An issue in thinkphp v.5.1 allows a remote attacker to execute arbitrary code via the routecheck function...

ThinkPHP Path Traversal Vulnerability

An issue in ThinkPHP Framework v.5.1 allows a remote attacker to execute arbitrary code via the routecheck function...

CVE-2025-50707

An issue in thinkphp3 v.3.2.5 allows a remote attacker to execute arbitrary code via the index.php component...

CVE-2025-50706

CVE-2025-50706 describes a vulnerability in ThinkPHP Framework v5.1 where an unauthenticated remote attacker can execute arbitrary code via the routecheck function. The CVE entry lists a high-severity (CVSSv3.1: 9.8, CRITICAL) impact with attack vector NETWORK and no privileges or user interactio...

thinkphp 安全漏洞

ThinkPHP is a PHP-based, open source, lightweight web application development framework from China's Top Thinking Information Technology ThinkPHP. A security vulnerability exists in thinkphp version v.5.1, which stems from a routecheck function that allows execution of arbitrary code...

CVE-2025-50706

An issue in thinkphp v.5.1 allows a remote attacker to execute arbitrary code via the routecheck function...

CVE-2022-33107

ThinkPHP v6.0.12 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\AbstractCache.php. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

CVE-2021-36567

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\AbstractCache...

ThinkPHP 安全漏洞

Top Think Information Technology ThinkPHP is a PHP-based, open source, lightweight web application development framework from China's Top Think Information Technology Company. A security vulnerability exists in ThinkPHP versions 6.1.3 to 8.0.4, which stems from a deserialization vulnerability in...

ThinkPHP 安全漏洞

Top Think Information Technology ThinkPHP is a PHP-based, open source, lightweight web application development framework from China's Top Think Information Technology. A security vulnerability exists in ThinkPHP versions v6.1.3 through v8.0.4, which stems from the presence of a deserialization...

2024: Old CVEs, New Targets — Active Exploitation of ThinkPHP

...

PT-2025-31939 · Thinkphp · Thinkphp

Name of the Vulnerable Software and Affected Versions: thinkphp version 5.1 Description: An issue in thinkphp version 5.1 allows a remote attacker to execute arbitrary code via the routecheck function. This flaw enables remote, unauthenticated users to include files and run code. Recommendations:...

VulnCheck KEV: CVE-2022-47945

ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled langswitchon=true. An unauthenticated and remote attacker can exploit this to execute arbitrary operating system commands, as demonstrated by including pearcmd.php...

CVE-2022-45982

thinkphp 6.0.06.0.13 and 6.1.06.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

PT-2023-14805

Name of the Vulnerable Software and Affected Versions: thinkphp versions 6.0.0 through 6.0.13 thinkphp versions 6.1.0 through 6.1.1 Description: The issue allows attackers to execute arbitrary code via a crafted payload, exploiting a deserialization vulnerability. This can be achieved by sending ...