Lucene search
+L

28 matches found

RedhatCVE
RedhatCVE
•added 2026/05/05 8:21 p.m.•24 views

CVE-2026-7676

A vulnerability was found in kerwincui FastBee up to 1.2.1. The affected element is the function ToolController.download of the file springboot/fastbee-open-api/src/main/java/com/fastbee/data/controller/ToolController.java of the component Tool Download Endpoint. The manipulation of the argument...

5.3CVSS5.4AI score0.00517EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/05/04 8:21 p.m.•19 views

CVE-2026-7677

A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the function Add of the file springboot/fastbee-admin/src/main/java/com/fastbee/web/controller/system/SysNoticeController.java of the component System Notice Handler. This manipulation of the argument...

5.1CVSS4.3AI score0.00331EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/03 5:15 a.m.•26 views

CVE-2026-7676

A vulnerability was found in kerwincui FastBee up to 1.2.1. The affected element is the function ToolController.download of the file springboot/fastbee-open-api/src/main/java/com/fastbee/data/controller/ToolController.java of the component Tool Download Endpoint. The manipulation of the argument...

5.3CVSS0.00517EPSS
SaveExploits0References4
NVD
NVD
•added 2026/05/03 5:15 a.m.•70 views

CVE-2026-7677

A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the function Add of the file springboot/fastbee-admin/src/main/java/com/fastbee/web/controller/system/SysNoticeController.java of the component System Notice Handler. This manipulation of the argument...

5.1CVSS0.00331EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/05/03 3:15 a.m.•138 views

CVE-2026-7677 kerwincui FastBee System Notice SysNoticeController.java add cross site scripting

A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the function Add of the file springboot/fastbee-admin/src/main/java/com/fastbee/web/controller/system/SysNoticeController.java of the component System Notice Handler. This manipulation of the argument...

5.1CVSS0.00331EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/05/03 3:15 a.m.•24 views

CVE-2026-7677

A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the function Add of the file springboot/fastbee-admin/src/main/java/com/fastbee/web/controller/system/SysNoticeController.java of the component System Notice Handler. This manipulation of the argument...

5.1CVSS4.3AI score0.00331EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/05/03 3:15 a.m.•11 views

CVE-2026-7677 kerwincui FastBee System Notice SysNoticeController.java add cross site scripting

A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the function Add of the file springboot/fastbee-admin/src/main/java/com/fastbee/web/controller/system/SysNoticeController.java of the component System Notice Handler. This manipulation of the argument...

5.1CVSS3.9AI score0.00331EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/05/03 3:15 a.m.•39 views

EUVD-2026-26811

A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the function Add of the file springboot/fastbee-admin/src/main/java/com/fastbee/web/controller/system/SysNoticeController.java of the component System Notice Handler. This manipulation of the argument...

5.1CVSS4.3AI score0.00331EPSS
SaveExploits0References4
CVE
CVE
•added 2026/05/03 3:15 a.m.•51 views

CVE-2026-7677

CVE-2026-7677 affects kerwincui FastBee (up to version 1.2.1). The vulnerable component is the Add function in springboot/fastbee-admin/src/main/java/com/fastbee/web/controller/system/SysNoticeController.java (System Notice Handler). The root cause is improper handling/manipulation of the argumen...

5.1CVSS3.9AI score0.00331EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/05/03 3:00 a.m.•33 views

CVE-2026-7676

A vulnerability was found in kerwincui FastBee up to 1.2.1. The affected element is the function ToolController.download of the file springboot/fastbee-open-api/src/main/java/com/fastbee/data/controller/ToolController.java of the component Tool Download Endpoint. The manipulation of the argument...

5.3CVSS5.4AI score0.00517EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
•added 2026/05/03 3:00 a.m.•29 views

EUVD-2026-26810

A vulnerability was found in kerwincui FastBee up to 1.2.1. The affected element is the function ToolController.download of the file springboot/fastbee-open-api/src/main/java/com/fastbee/data/controller/ToolController.java of the component Tool Download Endpoint. The manipulation of the argument...

5.3CVSS5.4AI score0.00517EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/05/03 3:00 a.m.•65 views

CVE-2026-7676 kerwincui FastBee Tool Download Endpoint ToolController.java ToolController.download path traversal

A vulnerability was found in kerwincui FastBee up to 1.2.1. The affected element is the function ToolController.download of the file springboot/fastbee-open-api/src/main/java/com/fastbee/data/controller/ToolController.java of the component Tool Download Endpoint. The manipulation of the argument...

5.3CVSS0.00517EPSS
SaveExploits0References4
CVE
CVE
•added 2026/05/03 3:00 a.m.•61 views

CVE-2026-7676

CVE-2026-7676 affects kerwincui FastBee up to version 1.2.1. The vulnerability resides in ToolController.download (springboot/fastbee-open-api/src/main/java/com/fastbee/data/controller/ToolController.java) where manipulation of the fileName argument enables path traversal. The issue is exploitabl...

5.3CVSS5AI score0.00517EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/05/03 3:00 a.m.•12 views

CVE-2026-7676 kerwincui FastBee Tool Download Endpoint ToolController.java ToolController.download path traversal

A vulnerability was found in kerwincui FastBee up to 1.2.1. The affected element is the function ToolController.download of the file springboot/fastbee-open-api/src/main/java/com/fastbee/data/controller/ToolController.java of the component Tool Download Endpoint. The manipulation of the argument...

5.3CVSS5AI score0.00517EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/05/03 12:00 a.m.•24 views

FastBee 跨站脚本漏洞

FastBee is an open-source IoT platform developed by FastBee in China. Versions of FastBee 1.2.1 and earlier contained a cross-site scripting vulnerability. This vulnerability originated from the function Add in the parameter handling of noticeContent within the System Notice Handler component,...

5.1CVSS5.6AI score0.00331EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/03 12:00 a.m.•4 views

CVE-2026-7676: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was found in kerwincui FastBee up to 1.2.1. The affected element is the function ToolController.download of the file springboot/fastbee-open-api/src/main/java/com/fastbee/data/controller/ToolController.java of the component Tool Download Endpoint. The manipulation of the argument...

5.3CVSS4.9AI score0.00517EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/03 12:00 a.m.•33 views

FastBee 路径遍历漏洞

FastBee is an open-source IoT platform developed by FastBee in China. Versions of FastBee 1.2.1 and earlier contained a path traversal vulnerability. This vulnerability stemmed from the operation of the ToolController.download function in the Tool Download Endpoint component, which handled the...

5.3CVSS5.8AI score0.00517EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/03 12:00 a.m.•35 views

PT-2026-36677

A vulnerability was found in kerwincui FastBee up to 1.2.1. The affected element is the function ToolController.download of the file springboot/fastbee-open-api/src/main/java/com/fastbee/data/controller/ToolController.java of the component Tool Download Endpoint. The manipulation of the argument...

5.3CVSS5.4AI score0.00517EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/03 12:00 a.m.•5 views

CVE-2026-7677: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the function Add of the file springboot/fastbee-admin/src/main/java/com/fastbee/web/controller/system/SysNoticeController.java of the component System Notice Handler. This manipulation of the argument...

5.1CVSS3.7AI score0.00331EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/03 12:00 a.m.•29 views

PT-2026-36678

A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the function Add of the file springboot/fastbee-admin/src/main/java/com/fastbee/web/controller/system/SysNoticeController.java of the component System Notice Handler. This manipulation of the argument...

5.1CVSS4.3AI score0.00331EPSS
SaveExploits0References5
Rows per page
Query Builder