5 matches found
PT-2025-47084
Name of the Vulnerable Software and Affected Versions Jiusi OA versions prior to 20251103 Description A security issue has been identified in Jiusi OA. The issue involves unrestricted upload capabilities through manipulation of the FileData argument within an unknown function of the...
EUVD-2025-37480
Authorization Bypass Through User-Controlled Key vulnerability in CB Project Ltd. Co. CVLand allows Parameter Injection.This issue affects CVLand: from 2.1.0 through 20251103...
CVE-2025-0987
Authorization Bypass Through User-Controlled Key vulnerability in CB Project Ltd. Co. CVLand allows Parameter Injection. This issue affects CVLand: from 2.1.0 through 20251103. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2025-0987 IDOR in CB Project's CVLand
Authorization Bypass Through User-Controlled Key vulnerability in CB Project Ltd. Co. CVLand allows Parameter Injection. This issue affects CVLand: from 2.1.0 through 20251103. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
PT-2025-44759
Name of the Vulnerable Software and Affected Versions CB Project Ltd. Co. CVLand versions 2.1.0 through 20251103 Description An authorization bypass exists in CB Project Ltd. Co. CVLand due to a parameter injection issue. This allows for unauthorized access through user-controlled keys...