645 matches found
EUVD-2023-1022
Malicious code in bioql PyPI...
EUVD-2024-45094
Malicious code in bioql PyPI...
EUVD-2024-49734
Malicious code in bioql PyPI...
EUVD-2023-45369
Malicious code in bioql PyPI...
EUVD-2025-31082
Malicious code in bioql PyPI...
EUVD-2022-3991
Malicious code in bioql PyPI...
EUVD-2022-0693
Malicious code in bioql PyPI...
Malicious code in botframework-wechat (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-47616 Malicious code in botframework-wechat (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2025-10943
A security flaw has been discovered in MikeCen WeChat-Face-Recognition up to 6e3f72bf8547d80b59e330f1137e4aa505f492c1. This vulnerability affects the function valid of the file wx.php. The manipulation of the argument echostr results in cross site scripting. The attack can be launched remotely...
CVE-2025-10943 MikeCen WeChat-Face-Recognition wx.php valid cross site scripting
A security flaw has been discovered in MikeCen WeChat-Face-Recognition up to 6e3f72bf8547d80b59e330f1137e4aa505f492c1. This vulnerability affects the function valid of the file wx.php. The manipulation of the argument echostr results in cross site scripting. The attack can be launched remotely...
CVE-2025-10943
The CVE-2025-10943 entry concerns MikeCen WeChat-Face-Recognition, affecting the wx.php file’s valid function. The vulnerability arises from manipulating the echostr argument, enabling cross-site scripting. Exploitation is described as remote, with nothing indicating versioned releases or a publi...
CVE-2025-10943 MikeCen WeChat-Face-Recognition wx.php valid cross site scripting
A security flaw has been discovered in MikeCen WeChat-Face-Recognition up to 6e3f72bf8547d80b59e330f1137e4aa505f492c1. This vulnerability affects the function valid of the file wx.php. The manipulation of the argument echostr results in cross site scripting. The attack can be launched remotely...
CVE-2025-10943 MikeCen WeChat-Face-Recognition wx.php valid cross site scripting
A security flaw has been discovered in MikeCen WeChat-Face-Recognition up to 6e3f72bf8547d80b59e330f1137e4aa505f492c1. This vulnerability affects the function valid of the file wx.php. The manipulation of the argument echostr results in cross site scripting. The attack can be launched remotely...
PT-2025-39364
Name of the Vulnerable Software and Affected Versions MikeCen WeChat-Face-Recognition affected versions not specified Description A security flaw exists in MikeCen WeChat-Face-Recognition. The issue involves cross site scripting resulting from manipulation of the echostr argument within the valid...
WeChat-Face-Recognition 代码注入漏洞
WeChat-Face-Recognition is a WeChat admin platform face recognition program by Mike Cen, an individual developer. WeChat-Face-Recognition suffers from a code injection vulnerability that stems from a misuse of the parameter echostr in the file wx.php, which could lead to a cross-site scripting...
CVE-2025-10943: Improper Neutralization of Input During Web Page Generation
A security flaw has been discovered in MikeCen WeChat-Face-Recognition up to 6e3f72bf8547d80b59e330f1137e4aa505f492c1. This vulnerability affects the function valid of the file wx.php. The manipulation of the argument echostr results in cross site scripting. The attack can be launched remotely...
Linux Distros Unpatched Vulnerability : CVE-2023-2617
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability classified as problematic was found in OpenCV wechatqrcode Module up to 4.7.0. Affected by this vulnerability is the function...
PT-2025-34148 · Old Peanut · Open-Shop
Name of the Vulnerable Software and Affected Versions: old-peanut Open-Shop versions through 1.0.0 Description: A Cross Site Request Forgery CSRF issue exists in old-peanut Open-Shop, allowing attackers to obtain sensitive information via a crafted HTTP Post message. Recommendations: At the momen...
CVE-2025-50902
Cross Site Request Forgery CSRF vulnerability in old-peanut Open-Shop aka old-peanut/wechatappletopensource thru 1.0.0 allows attackers to gain sensitive information via crafted HTTP Post message...