CVE-2026-28411

creationtimestamp| type| source ---|---|--- 2026-02-28 00:00:43+00:00| seen| https://infosec.exchange/users/offseq/statuses/116145313710936969 2026-02-28 00:00:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mfuw7sp34d2h 2026-02-28 01:06:12+00:00| seen|...

CVE-2021-28411

An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges...

CVE-2025-28411

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the editSave method in /tool/gen/editSave...

CVE-2025-28411

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the editSave method in /tool/gen/editSave...

CVE-2025-28411

A security vulnerability exists in RUoYi v.4.8.0 due to improper access control in the editSave method within the /tool/gen/editSave API endpoint. A remote attacker can exploit this issue to escalate privileges . As a temporary workaround, it is recommended to disable the editSave method or restr...

CVE-2021-28411

An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges...

CVE-2021-28411

An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges...

CVE-2021-28411

An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges...

CVE-2021-28411

CVE-2021-28411 affects lerry903 RuoYi 3.4.0. Root cause: an issue in getRememberedSerializedIdentity in CookieRememberMeManager allows remote attackers to escalate privileges. Documents consistently describe privilege elevation risk but do not provide patch details. PT-2023-12126 suggests disabli...

Schneider Electric APC Easy UPS Online Monitoring Software Unauthenticated RMI Calls (CVE-2023-28411)

Binary data schneiderelectricupsmonitoringsoftwareunauthrmi.nbin...

CVE-2023-28411

Double free in some IntelR Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access...

CVE-2023-28411

Double free in some IntelR Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access...

CVE-2023-28411

Double free in some IntelR Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access...

CVE-2023-28411

CVE-2023-28411 is a vulnerability in Intel Server Board BMC firmware (before version 2.90) causing a double free that may allow a privileged local attacker to disclose information. The issue is documented in the Intel Server Board BMC firmware advisory (INTEL-SA-00839) and is referenced across mu...

CVE-2022-28411

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/admin/?page=agents/manageagent...

CVE-2022-28411

CVE-2022-28411 affects Simple Real Estate Portal System v1.0. The vulnerability is a SQL injection exploitable via /reps/admin/?page=agents/manage_agent, as documented across multiple sources (CNVD, NVD, Red Hat, etc.). CVSS indicates a high/critical impact (CVSS v3.1: 9.8, network vector, no aut...

MATIO out-of-bounds read and SEGV vulnerabilities (CNVD-2019-28411)

matio is a C library for reading and writing MATLAB MAT files. An out-of-bounds read and SEGV vulnerability exists in the MatVarReadNextInfo5 function in mat5.c in libmatio.a in matio 1.5.13. No detailed vulnerability details are provided at this time...