PT-2026-94103

Name of the Vulnerable Software and Affected Versions AVideo versions prior to 29.0 commit c3edcc274c389816d434acadac07ee78eaf330c1 Description Authenticated users can post comments on password-protected and group-restricted videos because the software fails to verify video access permissions in...

CVE-2025-56264

The /api/comment endpoint in zhangyd-c OneBlog 2.3.9 contains a denial-of-service vulnerability...

CVE-2025-56264

The zhangyd-c OneBlog Java blog software, specifically version 2.3.9 , contains a denial-of-service (DoS) vulnerability. The flaw is located in the /api/comment endpoint and is attributed to uncontrolled resource consumption (CWE-400). This vulnerability allows an attacker to potentially disrupt ...

CVE-2025-56264: Uncontrolled Resource Consumption

The /api/comment endpoint in zhangyd-c OneBlog 2.3.9 contains a denial-of-service vulnerability...

CVE-2025-5513: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in quequnlong shiyi-blog up to 1.2.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /dev-api/api/comment/add. The manipulation of the argument content leads to cross site scripting. The attack can be launched...

CVE-2025-3962

A vulnerability classified as problematic was found in withstars Books-Management-System 1.0. This vulnerability affects unknown code of the file /api/comment/add of the component Comment Handler. The manipulation of the argument content leads to cross site scripting. The attack can be initiated...