PT-2025-37276

A security vulnerability has been detected in YunaiV ruoyi-vue-pro up to 2025.09. This vulnerability affects unknown code of the file /crm/contract/transfer. The manipulation of the argument id/newOwnerUserId leads to improper authorization. Remote exploitation of the attack is possible. The...

ruoyi-vue-pro 授权问题漏洞

ruoyi-vue-pro is China's Taro Road source code zhijiantianya open source an optimized refactoring of efficient backend management system framework for the development of enterprise backend , SaaS platforms , WeChat small program backend and so on. ruoyi-vue-pro 2025.09 and previous versions of th...

The vulnerability of the Manage Central Purchase Contract component of the SAP S/4HANA software platform allows a perpetrator to compromise the confidentiality and accessibility of protected information.

The vulnerability of the Manage Central Purchase Contract component in the SAP S/4HANA software platform is related to the absence of authentication. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and accessibility of the protected information...

Agiloft 安全漏洞

Agiloft is a contract management platform from Agiloft Corporation in the United States. A security vulnerability exists in Agiloft that stems from XML external entity injection and could lead to path traversal...

Malicious code in @espace-client-axafr/demat-contract (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41852 Malicious code in @espace-client-axafr/demat-contract (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @espace-client-axafr/contract-selection (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41848 Malicious code in @espace-client-axafr/contract-selection (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in hardhat-contract-deploy (npm)

The package hardhat-contract-deploy was found to contain malicious code...

Malicious code in nift-contract-viewer (npm)

The package nift-contract-viewer was found to contain malicious code...

Malicious code in multisender-smart-contract (npm)

The package multisender-smart-contract was found to contain malicious code...

MAL-2025-27496 Malicious code in nift-contract-viewer (npm)

The package nift-contract-viewer was found to contain malicious code...

Malicious code in bsa-contract (npm)

The package bsa-contract was found to contain malicious code...

MAL-2025-22212 Malicious code in hardhat-contract-deploy (npm)

The package hardhat-contract-deploy was found to contain malicious code...

MAL-2025-26886 Malicious code in multisender-smart-contract (npm)

The package multisender-smart-contract was found to contain malicious code...

MAL-2025-16227 Malicious code in bsa-contract (npm)

The package bsa-contract was found to contain malicious code...

Qiyuesuo Eelectronic Signature Platform 代码问题漏洞

Qiyuesuo Eelectronic Signature Platform is an e-signature and e-contract management platform from China Contract Lock Qiyuesuo. A code issue vulnerability exists in Qiyuesuo Eelectronic Signature Platform version 4.34 and earlier, which stems from improper handling of the parameter File in...

SUSE CVE-2020-26241

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. This is a Consensus vulnerability in Geth before version 1.9.17 which can be used to cause a chain-split where vulnerable nodes reject the canonical chain. Geth's pre-compiled dataCopy at 0x00...04 contract di...

Exploit for CVE-2025-4126

POC-CVE-2025-4126 smart contract reentrancy attack vulnerabili...

SAEL: Leveraging Large Language Models with Adaptive Mixture-Of-Experts for Smart Contract Vulnerability Detection

With the increasing security issues in blockchain, smart contract vulnerability detection has become a research focus. Existing vulnerability detection methods have their limitations: 1 Static analysis methods struggle with complex scenarios. 2 Methods based on specialized pre-trained models...