EUVD-2025-7543

Malicious code in bioql PyPI...

EUVD-2025-7545

Malicious code in bioql PyPI...

EUVD-2025-21230

Malicious code in bioql PyPI...

EUVD-2024-51424

Malicious code in bioql PyPI...

EUVD-2024-51423

Malicious code in bioql PyPI...

EUVD-2024-51422

Malicious code in bioql PyPI...

EUVD-2025-19242

Malicious code in bioql PyPI...

EUVD-2025-12463

Malicious code in bioql PyPI...

EUVD-2024-21484

Malicious code in bioql PyPI...

EUVD-2025-7544

Malicious code in bioql PyPI...

EUVD-2025-7563

Malicious code in bioql PyPI...

CVE-2024-48988: SQL Injection: Hibernate

SQL Injection vulnerability in Apache StreamPark. This issue affects Apache StreamPark: from 2.1.4 before 2.1.6. Users are recommended to upgrade to version 2.1.6, which fixes the issue. This vulnerability is present only in the distribution package SpringBoot platform and does not involve Maven...

CVE-2025-7488 JoeyBling SpringBoot_MyBatisPlus download path traversal

A vulnerability has been found in JoeyBling SpringBootMyBatisPlus up to a6a825513bd688f717dbae3a196bc9c9622fea26 and classified as critical. This vulnerability affects the function Download of the file /file/download. The manipulation of the argument Name leads to path traversal. The attack can b...

CVE-2025-7488 JoeyBling SpringBoot_MyBatisPlus download path traversal

A vulnerability has been found in JoeyBling SpringBootMyBatisPlus up to a6a825513bd688f717dbae3a196bc9c9622fea26 and classified as critical. This vulnerability affects the function Download of the file /file/download. The manipulation of the argument Name leads to path traversal. The attack can b...

CVE-2025-7488

The CVE-2025-7488 entry concerns JoeyBling SpringBoot_MyBatisPlus (up to a6a825513bd688f717dbae3a196bc9c9622fea26). The vulnerability resides in the Download function handling the /file/download endpoint, where manipulating the Name argument enables path traversal. It is described as remotely exp...

CVE-2025-7487 JoeyBling SpringBoot_MyBatisPlus upload SysFileController unrestricted upload

A vulnerability, which was classified as critical, was found in JoeyBling SpringBootMyBatisPlus up to a6a825513bd688f717dbae3a196bc9c9622fea26. This affects the function SysFileController of the file /file/upload. The manipulation of the argument portraitFile leads to unrestricted upload. It is...

CVE-2025-7487

The CVE-2025-7487 entry concerns JoeyBling SpringBoot_MyBatisPlus, specifically the SysFileController in /file/upload. The vulnerability arises from improper handling of the portraitFile argument, enabling unrestricted file uploads and remote exploitation. Public disclosures exist, but the exact ...

CVE-2025-7487 JoeyBling SpringBoot_MyBatisPlus upload SysFileController unrestricted upload

A vulnerability, which was classified as critical, was found in JoeyBling SpringBootMyBatisPlus up to a6a825513bd688f717dbae3a196bc9c9622fea26. This affects the function SysFileController of the file /file/upload. The manipulation of the argument portraitFile leads to unrestricted upload. It is...

PT-2025-29343 · Unknown · Joeybling Springboot Mybatisplus

Name of the Vulnerable Software and Affected Versions: JoeyBling SpringBoot MyBatisPlus versions prior to a6a825513bd688f717dbae3a196bc9c9622fea26 Description: A critical vulnerability exists in the SysFileController function located at /file/upload within JoeyBling SpringBoot MyBatisPlus...

SpringBoot_MyBatisPlus 代码问题漏洞

SpringBootMyBatisPlus is a SpringBoot integration with MyBatisPlus by Siwei Zhou, an individual developer. A code issue vulnerability exists in SpringBootMyBatisPlus, which stems from a wrong operation of the parameter portraitFile in file/file/upload leading to arbitrary file uploads...