Skip to content
Noroxi

yandaozi records

4 published records for vendor yandaozi.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2025-54815
    35Monitor

    Server-side template injection (SSTI) vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes.

    HighCVSS 8.8No exploitEPSS 0%

    yandaozi · ppressSep 19, 2025

  • CVE-2025-52159
    35Monitor

    Hardcoded credentials in default configuration of PPress 0.0.9.

    HighCVSS 8.8No exploitEPSS 0%

    yandaozi · ppressSep 19, 2025

  • CVE-2025-54761
    32Monitor

    An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie.

    HighCVSS 8.0No exploitEPSS 0%

    yandaozi · ppressSep 19, 2025

  • CVE-2025-25973
    26Monitor

    A stored Cross Site Scripting vulnerability in the "related recommendations" feature in Ppress v.0.0.9 allows a remote attacker to execute a

    MediumCVSS 6.5No exploitEPSS 0%

    yandaozi · ppressFeb 20, 2025