EUVD-2023-43907

Malicious code in bioql PyPI...

EUVD-2025-7568

Malicious code in bioql PyPI...

EUVD-2023-38918

Malicious code in bioql PyPI...

EUVD-2023-56071

Malicious code in bioql PyPI...

CVE-2023-34865

Directory traversal vulnerability in ujcms 6.0.2 allows attackers to move files via the rename feature...

CVE-2023-34747

File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload...

CVE-2023-34878

An issue was discovered in Ujcms v6.0.2 allows attackers to gain sensitive information via the dir parameter to /api/backend/core/web-file-html/download-zip...

CVE-2023-24369

A cross-site scripting XSS vulnerability in UJCMS v4.1.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the URL parameter under the Add New Articles function...

CVE-2024-55451

A Stored Cross-Site Scripting XSS vulnerability exists in authenticated SVG file upload and viewing functionality in UJCMS 9.6.3. The vulnerability arises from insufficient sanitization of embedded attributes in uploaded SVG files. When a maliciously crafted SVG file is viewed by other backend...

CVE-2024-55452

A URL redirection vulnerability exists in UJCMS 9.6.3 due to improper validation of URLs in the upload and rendering of new block / carousel items. This vulnerability allows authenticated attackers to redirect unprivileged users to an arbitrary, attacker-controlled webpage. When an authenticated...

CVE-2024-55452

A URL redirection vulnerability exists in UJCMS version 9.6.3 due to improper validation of URLs during the upload and rendering of new block or carousel items. This flaw allows an authenticated attacker to redirect unprivileged users to an arbitrary, attacker-controlled webpage. If a user clicks...

UJCMS Security Vulnerabilities

UJCMS is a Java open source content management system from UJCMS Open Source. A security vulnerability exists in UJCMS version v.8.0.2, which originated from a specially crafted script that allows remote attackers to obtain sensitive information and execute arbitrary code via the X-Forwarded-For...

CVE-2023-34747

File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload...

CVE-2023-34878

An issue was discovered in Ujcms v6.0.2 allows attackers to gain sensitive information via the dir parameter to /api/backend/core/web-file-html/download-zip...

CVE-2023-34865

Directory traversal vulnerability in ujcms 6.0.2 allows attackers to move files via the rename feature...