PT-2025-6007 · Beijing Guoju Information Technology Co. · Jeecg-Boot

Name of the Vulnerable Software and Affected Versions: Beijing Guoju Information Technology Co., Ltd JeecgBoot version 3.7.2 Description: A SQL injection issue allows a remote attacker to obtain sensitive information via the getTotalData component. There is no information provided about the...

CVE-2024-56963

An issue in Beijing Sogou Technology Development Co., Ltd Sogou Input iOS 12.2.0 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56954

Technical details about CVE-2024-56954 are not publicly provided in the supplied documents. No concrete affected components, versions beyond Haokan Video iOS 7.70.0, exploit steps, or fixes are given. Monitor for updates.

CVE-2024-56963

An issue in Beijing Sogou Technology Development Co., Ltd Sogou Input iOS 12.2.0 allows attackers to access sensitive user information via supplying a crafted link...

Logic flaw vulnerability in SAG security gateway of Beijing Shenzhou Green Alliance Technology Co.

SAG Security Gateway is an intelligent access gateway service. A logic flaw vulnerability exists in the SAG Security Gateway of Beijing Shenzhou Green Alliance Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in Internet Behavior Management of Beijing Tianrongxin Technology Co.

Ltd. is an information security product and service solution provider. A command execution vulnerability exists in Beijing Tianrongxin Internet Behavior Management, which can be exploited by attackers to execute arbitrary commands...

Command Execution Vulnerability in Internet Behavior Management System of Beijing Tianrongxin Technology Co.

Ltd. is an information security product and service solution provider. A command execution vulnerability exists in the Internet behavior management system of Beijing Tianrongxin Technology Co., Ltd, which can be exploited by attackers to execute arbitrary commands...

File Upload Vulnerability in CloudLink ERP Management System of Beijing Zhongke Shangsoft Software Co.

Ltd. is a high-tech software organization focusing on enterprise informatization construction. There is a file upload vulnerability in the CloudLink ERP management system of Beijing Zhongke Shangsoft Software Co., Ltd, which can be exploited by attackers to gain server privileges...

CVE-2024-13111 Beijing Yunfan Internet Technology Yunfan Learning Examination System JWT Token SysUserControl improper authentication

A vulnerability classified as critical was found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. Affected by this vulnerability is an unknown functionality of the file src/main/java/com/yf/exam/modules/sys/user/controller/SysUserControl of the component JWT Token...

CVE-2024-13110

Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2 is affected by CVE-2024-13110 due to an unknown function in src/main/java/com/yf/exam/modules/paper/controller/PaperController.java (Exam Answer Handler) that leads to information disclosure. Existence of remote-access ex...

CVE-2024-13109

A vulnerability was found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. It has been rated as critical. This issue affects some unknown processing of the file /doc.html. The manipulation leads to improper authorization. The attack may be initiated remotely. The...

Unauthorized Access Vulnerability in KingH5Stream of Beijing Asian Control Technology Development Co.

Beijing Asian Control Technology Development Co., Ltd. is a high-tech enterprise of industrial automation and informatization software platform, focusing on independent research and development, marketing and service of domestic industrial software. An unauthorized access vulnerability exists in...

Unauthorized Access Vulnerability in Kingh5stream of Beijing Asian Control Technology Development Co.

Beijing Asian Control Technology Development Co., Ltd. is a high-tech enterprise of industrial automation and informatization software platform, focusing on independent research and development, marketing and service of domestic industrial software. An unauthorized access vulnerability exists in...

CVE-2024-12991 Beijing Longda Jushang Technology DBShop商城系统 home-order cross site scripting

A vulnerability was found in Beijing Longda Jushang Technology DBShop商城系统 3.3 Release 231225. It has been declared as problematic. This vulnerability affects unknown code of the file /home-order. The manipulation of the argument orderStatus with the input %22%3E%3Csvg%20onload=alert5888%3E leads ...

CVE-2024-12991

CVE-2024-12991 affects Beijing Longda Jushang Technology DBShop商城系统 3.3 Release 231225. The vulnerable component is the file /home-order, where the parameter orderStatus can be manipulated to trigger a cross-site scripting (XSS) attack. The payload shown in reports, %22%3E%3Csvg%20onload=alert(58...

Unauthorized Access Vulnerability in StarRocks Database System of Beijing Mirror Boat Technology Co.

StarRocks database system is a new generation of open source extremely fast full-scene MPP Massively Parallel Processing database . There is an unauthorized access vulnerability in the StarRocks database system of Beijing Mirror Boat Technology Co. Ltd, which can be exploited by attackers to obta...

Denial of Service Vulnerability in Configuration King of Beijing Asian Control Technology Development Co.

Configuration King is an industrial automation configuration software produced by Beijing Asian Control Technology Development Co. Ltd. A denial of service vulnerability exists in Configuration King, which can be exploited by attackers to cause a denial of service...

Unauthorized Access Vulnerability in the Development Center of Beijing Asian Control Technology Development Co.

The development center introduces the concept of full configuration into the construction of intelligent manufacturing production control system, aiming at solving the problems of long development cycle, high cost and high threshold of the intelligent manufacturing MES system in the traditional...

XSS Vulnerability in StarRocks Database System of Beijing Mirror Boat Technology Co.

StarRocks database system is a new generation of open source extremely fast full-scene MPP database system . Beijing Mirror Boat Technology Co. StarRocks database system has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

XSS Vulnerability in StarRocks Database System of Beijing Mirror Boat Technology Co.

StarRocks database system is a new generation of open source extremely fast full-scene MPP database system . Beijing Mirror Boat Technology Co., Ltd StarRocks database system has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...