9302 matches found
CVE-2025-58711: Missing Authorization
Missing Authorization vulnerability in solwin Blog Designer PRO blog-designer-pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Blog Designer PRO: from n/a through = 3.4.8...
WordPress Plugin: Blog Designer PRO has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
CVE-2025-12305
A vulnerability was found in quequnlong shiyi-blog up to 1.2.1. This impacts an unknown function of the file src/main/java/com/mojian/controller/SysJobController.java of the component Job Handler. The manipulation results in deserialization. The attack can be executed remotely. The exploit has be...
EUVD-2025-36546
Unauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboot...
CVE-2025-60354
Unauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboot...
Build AI Agents with Spin and the OpenAI Agents SDK
...
Enabling AI Everywhere with Akamai Inference Cloud
...
CVE-2025-62958
Cross-Site Request Forgery CSRF vulnerability in Clifton Griffin Simple Content Templates for Blog Posts & Pages simple-post-template allows Cross Site Request Forgery.This issue affects Simple Content Templates for Blog Posts & Pages: from n/a through = 2.2.61...
CVE-2025-60354
Unauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboot...
blog-vue-springboot security vulnerabilities
blog-vue-springboot is a blog project by the individual developer Minghui Shi. A security vulnerability exists in blog-vue-springboot that stems from allowing unauthorized arbitrary post modifications...
CVE-2025-60354
Unauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboot...
CVE-2025-60354
The blog-vue-springboot project, a blog application developed by Minghui Shi, contains a security vulnerability that allows for the unauthorized modification of arbitrary articles . The root cause is attributed to Improper Access Control (CWE-284). This vulnerability allows an attacker to modify ...
PT-2025-44193
Name of the Vulnerable Software and Affected Versions blog-vue-springboot affected versions not specified Description An issue exists that allows for the unauthorized modification of articles. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...
CVE-2025-60354: Improper Access Control
Unauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboot...
CVE-2025-12305
A vulnerability was found in quequnlong shiyi-blog up to 1.2.1. This impacts an unknown function of the file src/main/java/com/mojian/controller/SysJobController.java of the component Job Handler. The manipulation results in deserialization. The attack can be executed remotely. The exploit has be...
CVE-2025-12305
A vulnerability was found in quequnlong shiyi-blog up to 1.2.1. This impacts an unknown function of the file src/main/java/com/mojian/controller/SysJobController.java of the component Job Handler. The manipulation results in deserialization. The attack can be executed remotely. The exploit has be...
CVE-2025-12305
The CVE-2025-12305 issue affects quequnlong shiyi-blog up to version 1.2.1, specifically the Job Handler component and the SysJobController.java file. The vulnerability is a deserialization flaw that can be triggered remotely, with an exploit publicly available. Affected software: quequnlong shiy...
CVE-2025-12305 quequnlong shiyi-blog Job SysJobController.java deserialization
A vulnerability was found in quequnlong shiyi-blog up to 1.2.1. This impacts an unknown function of the file src/main/java/com/mojian/controller/SysJobController.java of the component Job Handler. The manipulation results in deserialization. The attack can be executed remotely. The exploit has be...
CVE-2025-12305 quequnlong shiyi-blog Job SysJobController.java deserialization
A vulnerability was found in quequnlong shiyi-blog up to 1.2.1. This impacts an unknown function of the file src/main/java/com/mojian/controller/SysJobController.java of the component Job Handler. The manipulation results in deserialization. The attack can be executed remotely. The exploit has be...