Security Bulletin: IBM Integration Bus for z/OS is vulnerable to a privilege escalation attack ( CVE-2025-36014 )

Summary IBM Integration Bus for z/OS is vulnerable to a privilege escalation attack. Vulnerability Details CVEID:CVE-2025-36014 DESCRIPTION: IBM App Connect Enterprise Integration Bus is vulnerable to code injection by a privileged user with access to the IIB install directory. CWE:CWE-94: Improp...

CVE-2025-4779 Stored Cross-site Scripting (XSS) in lunary-ai/lunary

lunary-ai/lunary versions prior to 1.9.24 are vulnerable to stored cross-site scripting XSS. An unauthenticated attacker can inject malicious JavaScript into the v1/runs/ingest endpoint by adding an empty citations field, triggering a code path where dangerouslySetInnerHTML is used to render...

CVE-2025-7101

A vulnerability was found in BoyunCMS up to 1.4.20. It has been classified as critical. This affects an unknown part of the file /install/installok.php of the component Configuration File Handler. The manipulation of the argument dbpass leads to code injection. It is possible to initiate the atta...

CVE-2025-7101

A vulnerability was found in BoyunCMS up to 1.4.20. It has been classified as critical. This affects an unknown part of the file /install/installok.php of the component Configuration File Handler. The manipulation of the argument dbpass leads to code injection. It is possible to initiate the atta...

CVE-2025-7101

Summary of CVE-2025-7101 (Mode C): A vulnerability in BoyunCMS up to version 1.4.20 affects the Configuration File Handler, specifically an unknown part of the file /install/install_ok.php. Manipulation of the argument db_pass leads to code injection. The vulnerability is remotely exploitable, an...

CVE-2025-7101 BoyunCMS Configuration File install_ok.php code injection

A vulnerability was found in BoyunCMS up to 1.4.20. It has been classified as critical. This affects an unknown part of the file /install/installok.php of the component Configuration File Handler. The manipulation of the argument dbpass leads to code injection. It is possible to initiate the atta...

CVE-2025-7101 BoyunCMS Configuration File install_ok.php code injection

A vulnerability was found in BoyunCMS up to 1.4.20. It has been classified as critical. This affects an unknown part of the file /install/installok.php of the component Configuration File Handler. The manipulation of the argument dbpass leads to code injection. It is possible to initiate the atta...

Portábilis i-Educar 代码注入漏洞

Portábilis i-Educar is an application from Portábilis. It can easily help you with basic and technical education. A code injection vulnerability exists in Portábilis i-Educar version 2.9.0, which stems from improper handling of the parameter Função in the file /intranet/educarfuncaodet.php, which...

PT-2025-28470 · Ibm · Ibm Sterling File Gateway +1

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator versions 6.0.0.0 through 6.1.2.6 IBM Sterling B2B Integrator versions 6.2.0.0 through 6.2.0.4 IBM Sterling File Gateway versions 6.0.0.0 through 6.1.2.6 IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.4...

CVE-2025-36014: Improper Control of Generation of Code

IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.5 is vulnerable to code injection by a privileged user with access to the IIB install directory...

SourceCodester Best Salon Management System 代码注入漏洞

SourceCodester Best Salon Management System is a SourceCodester open source salon management system. A code injection vulnerability exists in SourceCodester Best Salon Management System version 1.0, which originates from an incorrect operation of the file /panel/editplan.php and could lead to a...

i-Educar 代码注入漏洞

i-Educar is a free educational software from Portábilis Open Source. A code injection vulnerability exists in i-Educar version 2.9.0, which stems from improper handling of the parameter Benefício in the file /intranet/educaralunobeneficiolst.php, which could lead to a cross-site scripting attack...

PT-2025-28199 · Ibm · Ibm Integration Bus

Name of the Vulnerable Software and Affected Versions: IBM Integration Bus for z/OS versions 10.1.0.0 through 10.1.0.5 Description: The issue allows for code injection by a privileged user with access to the IIB install directory. Recommendations: For versions 10.1.0.0 through 10.1.0.5, consider...

i-Educar 代码注入漏洞

i-Educar is a free educational software from Portábilis Open Source. A code injection vulnerability exists in i-Educar version 2.9.0, which stems from improper handling of the parameter Nome in the file /module/ComponenteCurricular/edit, which could lead to a cross-site scripting attack...

Portábilis i-Educar 代码注入漏洞

Portábilis i-Educar is an application from Portábilis. It can easily help you with basic and technical education. A code injection vulnerability exists in Portábilis i-Educar version 2.9.0, which stems from improper handling of the parameter Curso in the file /intranet/educarcursodet.php, which...

SourceCodester Best Salon Management System 代码注入漏洞

SourceCodester Best Salon Management System is a SourceCodester open source salon management system. A code injection vulnerability exists in version 1.0 of the SourceCodester Best Salon Management System, which originates from an incorrect operation of the file /panel/search-appointment.php, and...

i-Educar 代码注入漏洞

i-Educar is a free educational software open source by Portábilis. A code injection vulnerability exists in i-Educar version 2.9.0, which stems from improper handling of the parameter Escola in the file /intranet/educarescolalst.php, which could lead to a cross-site scripting attack...

PT-2025-28096

Name of the Vulnerable Software and Affected Versions: BoyunCMS versions up to 1.4.20 Description: A critical issue affects the Configuration File Handler component, specifically an unknown part of the /install/install ok.php file. The manipulation of the db pass argument leads to code injection...

SourceCodester Best Salon Management System 代码注入漏洞

SourceCodester Best Salon Management System is SourceCodester open source a salon management system. A code injection vulnerability exists in version 1.0 of the SourceCodester Best Salon Management System, which originates from an incorrect manipulation of the parameter Staff Name in the file...

PT-2025-28200 · Unknown · Educoder Challenges

Name of the Vulnerable Software and Affected Versions: educoder challenges version 1.0 Description: The issue is related to insufficient security mechanisms for created containers, allowing attackers to execute arbitrary code by injecting crafted content into a container. Recommendations: For...