Lucene search
K

10 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-47652

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00197EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-5356

Malicious code in bioql PyPI...

4.4CVSS6.6AI score0.00094EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/02/28 12:28 a.m.8 views

CVE-2025-25791

An arbitrary file upload vulnerability in the plugin installation feature of YZNCMS v2.0.1 allows attackers to execute arbitrary code via uploading a crafted Zip file...

4.4CVSS7.8AI score0.00094EPSS
Exploits1References1
NVD
NVD
added 2025/02/26 3:15 p.m.4 views

CVE-2025-25791

An arbitrary file upload vulnerability in the plugin installation feature of YZNCMS v2.0.1 allows attackers to execute arbitrary code via uploading a crafted Zip file...

4.4CVSS0.00094EPSS
Exploits1References3
OSV
OSV
added 2025/02/26 3:15 p.m.4 views

CVE-2025-25791

An arbitrary file upload vulnerability in the plugin installation feature of YZNCMS v2.0.1 allows attackers to execute arbitrary code via uploading a crafted Zip file...

4.4CVSS8AI score
Exploits0References3
CVE
CVE
added 2025/02/26 12:0 a.m.75 views

CVE-2025-25791

The CVE-2025-25791 entry describes an arbitrary file upload vulnerability in the plugin installation feature of YZNCMS v2.0.1. Attackers can upload a crafted Zip file to execute arbitrary code on the affected system. The impact is limited to code execution via the upload path, as per the descript...

4.4CVSS7.5AI score0.00094EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2025/02/26 12:0 a.m.3 views

YznCMS 安全漏洞

YznCMS is a backend development framework open source by China ken678. A security vulnerability exists in YznCMS v2.0.1, the vulnerability stems from the existence of arbitrary file upload problem, an attacker can upload a well-designed Zip file to execute arbitrary code...

4.4CVSS7.3AI score0.00094EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/02/26 12:0 a.m.7 views

CVE-2025-25791

An arbitrary file upload vulnerability in the plugin installation feature of YZNCMS v2.0.1 allows attackers to execute arbitrary code via uploading a crafted Zip file...

0.00094EPSS
Exploits1References3
CNVD
CNVD
added 2024/08/23 12:0 a.m.10 views

YznCMS Cross-Site Scripting Vulnerability (CNVD-2024-38192)

YznCMS is a backend development framework. A cross-site scripting vulnerability exists in YznCMS version 1.4.2, which stems from the lack of effective filtering and escaping of user-supplied data in the component /index/index.html, and can be exploited by an attacker to execute arbitrary Web scri...

5.4CVSS6.5AI score0.0025EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2023/07/06 12:0 a.m.3 views

PT-2023-25793 · Yzncms · Yzncms

Name of the Vulnerable Software and Affected Versions: YznCMS version 1.1.0 Description: A Cross-Site Request Forgery CSRF issue in the /public/admin/profile/update.html component allows attackers to change the Administrator password using a crafted POST request. Recommendations: For YznCMS versi...

6.5CVSS6.5AI score0.00067EPSS
Exploits1References3
Rows per page
Query Builder