cherry 代码注入漏洞

cherry is an HTTP server for Chee Personal Developers. A code injection vulnerability exists in cherry versions 1.4.8 through 1.5.0, which stems from improper handling of custom URLs and could lead to remote code execution...

LitmusChaos 安全漏洞

LitmusChaos is a program open-sourced by Litmus Chaos that practices chaos engineering in a cloud-native manner. A security vulnerability exists in LitmusChaos 3.19.0 and earlier versions, which stems from improper handling of the parameter projectID, which could lead to improper control of...

litemall 代码问题漏洞

litemall is a small shopping mall system for linlinjava individual developers. A code issue vulnerability exists in litemall 1.8.0 and earlier versions, which stems from improper handling of the parameter File in the file /wx/storage/upload, which could lead to unlimited uploads...

Linux Distros Unpatched Vulnerability : CVE-2024-22362

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Drupal contains a vulnerability with improper handling of structural elements. If this vulnerability is exploited, an attacker may be able to cause a...

Hospital Management System 安全漏洞

Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version v4, which results from SQL injection due to incorrect manipulation of the parameter patientcontact in the file patientsearch.php...

Linux Distros Unpatched Vulnerability : CVE-2025-37879

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - 9p/net: fix improper handling of bogus negative read/write replies In p9clientwrite and p9clientreadonce, if the server incorrectly replies with success but a...

mccms 安全漏洞

mccms Man City CMS is a rapid website builder system for individual developers of China Smokey River South chshcms. A security vulnerability exists in mccms version v2.7.0, which originates from improper handling of the pic parameter in the sysappscontrollersapiGf.php file, which may lead to SSRF...

CVE-2025-47281

CVE-2025-47281 affects Kyverno up to version 1.14.1, where DoS can be triggered by crafted JMESPath expressions using {{@}} with an invalid function, causing a nil substitution and a panic in getValueAsStringMap that crashes Kyverno worker threads and reports controller pod. The issue is fixed in...

The vulnerability of the User Interface Manager component in the Security Agent of Trend Micro’s anti-virus software products, Apex One and Apex One as a Service, allows a malicious actor to bypass existing security restrictions and execute arbitrary code.

The vulnerability of the User Interface Manager component in Trend Micro Apex One and Apex One as a Service anti-virus software programs relates to improper handling of user actions. Exploiting this vulnerability can allow attackers to bypass existing security restrictions and execute arbitrary...

WordPress WP-BusinessDirectory SQL Injection Vulnerability

WordPress WP-BusinessDirectory is a business directory plugin for the WordPress platform, which is mainly used to create and manage professional business directory websites, supporting the display of service provider information by location, category and other classifications, and monetizing...

Improper Handling Of HTTP Headers

on-headers is vulnerable to Improper Handling of HTTP Headers. The vulnerability is due to unexpected header modification caused by incorrect processing when an array is passed to response.writeHead, potentially altering response headers unintentionally...

CVE-2024-42209

HCL Connections is vulnerable to an information disclosure vulnerability that could allow a user to obtain sensitive information they are not entitled to, which is caused by improper handling of request data...

CVE-2024-42209 HCL Connections is vulnerable to an information disclosure vulnerability

HCL Connections is vulnerable to an information disclosure vulnerability that could allow a user to obtain sensitive information they are not entitled to, which is caused by improper handling of request data...

Improper Handling of Unexpected Data Type

Overview Affected versions of this package are vulnerable to Improper Handling of Unexpected Data Type via the response.writeHead function. An attacker can manipulate HTTP response headers by passing an array to this function, potentially leading to unintended disclosure or modification of header...

The vulnerability of the corporate platform Microsoft Teams, which arises from the improper handling of insufficient permissions or privileges, allows a perpetrator to elevate their privileges.

The vulnerability of the corporate platform Microsoft Teams is related to the improper handling of insufficient permissions or privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Laravel Translation Manager PHP framework allows attackers to perform cross-site scripting attacks.

The vulnerability of the Laravel Translation Manager PHP framework is related to the lack of security measures for handling web page structures. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2025-52947

An Improper Handling of Exceptional Conditions vulnerability in route processing of Juniper Networks Junos OS on specific end-of-life EOL ACX Series platforms allows an attacker to crash the Forwarding Engine Board FEB by flapping an interface, leading to a Denial of Service DoS. On ACX1000,...

CVE-2025-52947

An Improper Handling of Exceptional Conditions vulnerability in route processing of Juniper Networks Junos OS on specific end-of-life EOL ACX Series platforms allows an attacker to crash the Forwarding Engine Board FEB by flapping an interface, leading to a Denial of Service DoS. On ACX1000,...

BIT-TOMCAT-2025-46701 Apache Tomcat: Security constraint bypass for CGI scripts

Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply to the pathInfo component of a URI mapped to the CGI servlet. This issue affects Apache Tomcat: from 11.0.0 through 11.0.6, from 10.1.0 through...

CVE-2025-53645

CVE-2025-53645 affects Zimbra Collaboration Suite (ZCS). Versions before 9.0.0 Patch 46, 10.0.x before 10.0.15, and 10.1.x before 10.1.9 are vulnerable due to improper handling of excessive, comma-separated path segments in the Admin Console. An unauthenticated remote attacker can issue specially...