EUVD-2025-32518

When parsing the header for a DHAV file, there's an integer underflow in offset calculation that leads to reading the duration from before the start of the allocated buffer. If we load a DHAV file that is larger than MAXDURATIONBUFFERSIZE bytes 0x100000 for example 0x101000 bytes, then at 0 we ha...

EUVD-2022-30533

Malicious code in bioql PyPI...

EUVD-2021-33033

Malicious code in bioql PyPI...

EUVD-2023-30309

Malicious code in bioql PyPI...

EUVD-2022-30978

Malicious code in bioql PyPI...

EUVD-2022-30180

Malicious code in bioql PyPI...

EUVD-2023-59742

Malicious code in bioql PyPI...

EUVD-2022-30976

Malicious code in bioql PyPI...

EUVD-2022-30591

Malicious code in bioql PyPI...

EUVD-2024-20796

Malicious code in bioql PyPI...

EUVD-2021-33190

Malicious code in bioql PyPI...

EUVD-2025-19468

Malicious code in bioql PyPI...

EUVD-2024-52592

Malicious code in bioql PyPI...

EUVD-2025-27110

Malicious code in bioql PyPI...

EUVD-2024-41429

Malicious code in bioql PyPI...

JeecgBoot 授权问题漏洞

JeecgBoot is a Java low-code platform for enterprise web applications from China National Torch Jeecg. An authorization issue vulnerability exists in JeecgBoot 3.8.2 and earlier versions, which stems from an improper authorization in the file /sys/position/exportXls, which could lead to a remote...

CVE-2025-10980 JeecgBoot exportXls improper authorization

A security vulnerability has been detected in JeecgBoot up to 3.8.2. This affects an unknown function of the file /sys/position/exportXls. Such manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The...

CVE-2025-10980

The CVE affects JeecgBoot up to 3.8.2, with an improper authorization flaw in the file /sys/position/exportXls that can be triggered remotely. The issue enables a remote attack and is publicly disclosed. Affected component: /sys/position/exportXls within JeecgBoot; root cause: improper authorizat...

PT-2025-39464

Name of the Vulnerable Software and Affected Versions JeecgBoot versions through 3.8.2 Description A security issue exists in JeecgBoot that allows for improper authorization. This is related to a file at /sys/position/exportXls and an unknown function within it. The attack can be launched...

CVE-2023-53372

In the Linux kernel, the following vulnerability has been resolved: sctp: fix a potential overflow in sctpifwdtsnskip Currently, when traversing ifwdtsn skips with sctpwalkifwdtsn, it only checks the pos against the end of the chunk. However, the data left for the last pos may be sizeofstruct...