Lucene search
+L

10 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2023-47652

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00358EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-5356

Malicious code in bioql PyPI...

4.4CVSS6.6AI score0.00239EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2025/02/28 12:28 a.m.•18 views

CVE-2025-25791

An arbitrary file upload vulnerability in the plugin installation feature of YZNCMS v2.0.1 allows attackers to execute arbitrary code via uploading a crafted Zip file...

4.4CVSS7.8AI score0.00239EPSS
SaveExploits1References1
NVD
NVD
•added 2025/02/26 3:15 p.m.•19 views

CVE-2025-25791

An arbitrary file upload vulnerability in the plugin installation feature of YZNCMS v2.0.1 allows attackers to execute arbitrary code via uploading a crafted Zip file...

4.4CVSS0.00239EPSS
SaveExploits1References2
OSV
OSV
•added 2025/02/26 12:00 a.m.•13 views

CVE-2025-25791

An arbitrary file upload vulnerability in the plugin installation feature of YZNCMS v2.0.1 allows attackers to execute arbitrary code via uploading a crafted Zip file...

4.4CVSS8AI score
SaveExploits0References4
CVE
CVE
•added 2025/02/26 12:00 a.m.•100 views

CVE-2025-25791

The backend development framework YZNCMS v2.0.1 is susceptible to an arbitrary file upload vulnerability within its plugin installation feature. Attackers can exploit this by uploading a crafted Zip file to achieve arbitrary code execution . As a mitigation, it is recommended to disable the plugi...

4.4CVSS7.5AI score0.00239EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2025/02/26 12:00 a.m.•17 views

YznCMS 安全漏洞

YznCMS is a backend development framework open source by China ken678. A security vulnerability exists in YznCMS v2.0.1, the vulnerability stems from the existence of arbitrary file upload problem, an attacker can upload a well-designed Zip file to execute arbitrary code...

4.4CVSS7.3AI score0.00239EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/02/26 12:00 a.m.•31 views

CVE-2025-25791

An arbitrary file upload vulnerability in the plugin installation feature of YZNCMS v2.0.1 allows attackers to execute arbitrary code via uploading a crafted Zip file...

0.00239EPSS
SaveExploits1References2
CNVD
CNVD
•added 2024/08/23 12:00 a.m.•70 views

YznCMS Cross-Site Scripting Vulnerability (CNVD-2024-38192)

YznCMS is a backend development framework. A cross-site scripting vulnerability exists in YznCMS version 1.4.2, which stems from the lack of effective filtering and escaping of user-supplied data in the component /index/index.html, and can be exploited by an attacker to execute arbitrary Web scri...

5.4CVSS6.5AI score0.00324EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/07/06 12:00 a.m.•15 views

PT-2023-25793 · Yzncms · Yzncms

Name of the Vulnerable Software and Affected Versions: YznCMS version 1.1.0 Description: A Cross-Site Request Forgery CSRF issue in the /public/admin/profile/update.html component allows attackers to change the Administrator password using a crafted POST request. Recommendations: For YznCMS versi...

6.5CVSS6.5AI score0.00242EPSS
SaveExploits1References3
Rows per page
Query Builder