Lucene search
+L

49 matches found

RedhatCVE
RedhatCVE
•added 2026/02/28 7:47 a.m.•32 views

CVE-2026-3286

A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java of the component Image Save Endpoint. Such manipulation of the...

6.5CVSS6.4AI score0.00404EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/02/27 6:31 a.m.•23 views

EUVD-2026-8993

A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java of the component Image Save Endpoint. Such manipulation of the...

6.5CVSS6.4AI score0.00404EPSS
SaveExploits1References5
NVD
NVD
•added 2026/02/27 4:16 a.m.•28 views

CVE-2026-3286

A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java of the component Image Save Endpoint. Such manipulation of the...

6.5CVSS0.00404EPSS
SaveExploits1References4
osv-cve
osv-cve
•added 2026/02/27 3:32 a.m.•12 views

CVE-2026-3286 itwanger paicoding Image Save Endpoint ImageRestController.java save server-side request forgery

A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java of the component Image Save Endpoint. Such manipulation of the...

5.3CVSS6.2AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2026/02/27 3:32 a.m.•66 views

CVE-2026-3286 itwanger paicoding Image Save Endpoint ImageRestController.java save server-side request forgery

A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java of the component Image Save Endpoint. Such manipulation of the...

6.5CVSS0.00404EPSS
SaveExploits1References4
CVE
CVE
•added 2026/02/27 3:32 a.m.•53 views

CVE-2026-3286

The CVE-2026-3286 entry concerns itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The vulnerable component is the Image Save Endpoint, specifically the Save function in paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java. The issue arises from manipula...

6.5CVSS6.4AI score0.00404EPSS
SaveExploits1References4Affected Software1
attackerkb
attackerkb
•added 2026/02/27 3:32 a.m.•16 views

CVE-2026-3286

A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java of the component Image Save Endpoint. Such manipulation of the...

6.5CVSS6.4AI score0.00404EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2026/02/27 12:00 a.m.•27 views

paicoding 代码问题漏洞

Paicoding is an open-source community system developed by ITWanger’s individual developers. Versions 1.0.0, 1.0.1, 1.0.2, and 1.0.3 of Paicoding contain code vulnerabilities. These vulnerabilities stem from incorrect handling of the img parameter in the function Save within the component Image Sa...

6.5CVSS6.7AI score0.00404EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/27 12:00 a.m.•13 views

CVE-2026-3286: Server-Side Request Forgery (SSRF)

A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java of the component Image Save Endpoint. Such manipulation of the...

6.5CVSS6.4AI score0.00404EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/02/27 12:00 a.m.•34 views

PT-2026-22293

A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java of the component Image Save Endpoint. Such manipulation of the...

6.5CVSS6.4AI score0.00404EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2025-12451

Malicious code in bioql PyPI...

5.4CVSS5.1AI score0.00359EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2025-12450

Malicious code in bioql PyPI...

5.5CVSS5.7AI score0.00487EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2025/05/20 11:19 p.m.•39 views

CVE-2025-4839

A vulnerability has been found in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /paicoding-core/src/main/java/com/github/paicoding/forum/core/util/CrossUtil.java. The manipulation leads to permissiv...

8.1CVSS6.9AI score0.00306EPSS
SaveExploits1
NVD
NVD
•added 2025/05/17 10:15 p.m.•63 views

CVE-2025-4839

A vulnerability has been found in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /paicoding-core/src/main/java/com/github/paicoding/forum/core/util/CrossUtil.java. The manipulation leads to permissiv...

8.1CVSS0.00306EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/05/17 10:00 p.m.•66 views

CVE-2025-4839 itwanger paicoding CrossUtil.java cross-domain policy

A vulnerability has been found in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /paicoding-core/src/main/java/com/github/paicoding/forum/core/util/CrossUtil.java. The manipulation leads to permissiv...

3.1CVSS0.00306EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/05/17 10:00 p.m.•15 views

CVE-2025-4839 itwanger paicoding CrossUtil.java cross-domain policy

A vulnerability has been found in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /paicoding-core/src/main/java/com/github/paicoding/forum/core/util/CrossUtil.java. The manipulation leads to permissiv...

3.1CVSS4AI score0.00306EPSS
SaveExploits1References4
Mend
Mend
•added 2025/05/17 10:00 p.m.•6 views

CVE-2025-4839

A vulnerability has been found in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /paicoding-core/src/main/java/com/github/paicoding/forum/core/util/CrossUtil.java. The manipulation leads to permissiv...

8.1CVSS0.00306EPSS
SaveExploits1References6
CVE
CVE
•added 2025/05/17 10:00 p.m.•70 views

CVE-2025-4839

CVE-2025-4839 affects itwanger paicoding versions 1.0.0–1.0.3. Affects CrossUtil.java in the paicoding-core path, enabling a permissive cross-domain policy with untrusted domains. Vectors: remote exploitation with rather high complexity; exploitation described as difficult but publicly disclosed....

8.1CVSS4AI score0.00306EPSS
SaveExploits1References4Affected Software1
osv-cve
osv-cve
•added 2025/05/17 10:00 p.m.•15 views

CVE-2025-4839 itwanger paicoding CrossUtil.java cross-domain policy

A vulnerability has been found in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /paicoding-core/src/main/java/com/github/paicoding/forum/core/util/CrossUtil.java. The manipulation leads to permissiv...

2.3CVSS4.4AI score
SaveExploits0References6
CNNVD
CNNVD
•added 2025/05/17 12:00 a.m.•23 views

paicoding 安全漏洞

paicoding is an open source community system for itwanger individual developers. A security vulnerability exists in paicoding versions 1.0.0, 1.0.1, 1.0.2, and 1.0.3, which stems from an improper cross-domain policy due to misuse of the file CrossUtil.java...

8.1CVSS4.2AI score0.00306EPSS
SaveExploits1References6
Rows per page
Query Builder