115 matches found
MaxKB 代码注入漏洞
MaxKB is a 1Panel-dev open source open source knowledge base question and answer system based on a large language model and RAG. MaxKB suffers from a code injection vulnerability that stems from a reverse shell vulnerability in the function library module that allows a privileged user to create a...
CVE-2025-28091
maccms10 v2025.1000.4047 has a Server-Side Request Forgery SSRF vulnerability via Add Article...
Huawei HarmonyOS media library module privilege checksum vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege checking vulnerability exists in the Huawei HarmonyOS media library module, which can be exploited by an attacker to compromise confidentiality...
Huawei HarmonyOS media library module privilege checksum vulnerability (CNVD-2025-07255)
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege checking vulnerability exists in the Huawei HarmonyOS media library module, which can be exploited by an attacker to compromise confidentiality...
CVE-2024-58047
Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-58049
Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-58049
Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
PT-2025-9639
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A permission verification issue exists in the media library module, which may impact service confidentiality upon successful exploitation. Recommendations At the moment, there is no informatio...
PT-2025-9641
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A permission verification issue exists in the media library module. Successful exploitation of this issue may impact service confidentiality. Recommendations At the moment, there is no...
CVE-2024-58047: Exposure of Sensitive Information to an Unauthorized Actor
Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-58049: Exposure of Sensitive Information to an Unauthorized Actor
Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-57954
Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-57954
Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
PT-2025-5812 · Unknown · Media Library Module
Name of the Vulnerable Software and Affected Versions: Media library module affected versions not specified Description: The issue concerns a permission verification vulnerability in the media library module. Successful exploitation of this vulnerability may affect service confidentiality. There ...
CVE-2024-57954: Improper Authorization
Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
MaxKB 安全漏洞
MaxKB is a 1Panel-dev open source open source knowledge base question and answer system based on a large language model and RAG. A security vulnerability exists in MaxKB versions prior to 1.9.0, which stems from a remote command execution in the function library module that allows a privileged us...
CVE-2023-47832
Missing Authorization vulnerability in searchiq SearchIQ allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SearchIQ: from n/a through 4.4...
CVE-2024-32990
Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulnerability will affect availability...