320 matches found
CVE-2026-79571
The springboot-project v1.0.0 is affected by an incorrect access control vulnerability in the SellerAuthorizeAspect component. This flaw allows unauthenticated attackers to bypass authentication to access all seller management interfaces . Impacted actions include listing all products and orders,...
EUVD-2026-72849
Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off sale, finish/cancel orders, and modify categories without authentication...
CVE-2026-79571
Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off sale, finish/cancel orders, and modify categories without authentication...
CVE-2026-11521
Mohammed-eid35 bank-management-system-springboot (Transaction Endpoint) has a vulnerability in TransactionController.java leading to improper authorization. A remote attacker could exploit it, and public PoCs exist per the CVE metrics. Affected version details are not provided due to rolling rele...
CVE-2026-11521
A security vulnerability has been detected in Mohammed-eid35 bank-management-system-springboot up to 7b9bcc65ad7df3db29af71aed9bb500e5f24d948. This affects an unknown part of the file src/main/java/com/alien/bank/management/system/controller/TransactionController.java of the component Transaction...
CVE-2024-41600
Insecure Permissions vulnerability in lin-CMS Springboot v.0.2.1 and before allows a remote attacker to obtain sensitive information via the login method in the UserController.java component...
CVE-2025-55948
The yzcheng90 X-SpringBoot 6.0 platform contains a security vulnerability in its role-based access control (RBAC) implementation. The flaw stems from a lack of atomic synchronization between the frontend menu systems and backend permission tables . When privileges are revoked via the frontend, th...
X-SpringBoot 安全漏洞
X-SpringBoot is a lightweight Java rapid development platform for czx individual developers. A security vulnerability exists in X-SpringBoot version 6.0, which stems from the unsynchronized front-end and back-end privilege components and could lead to an elevation of privilege attack...
CVE-2025-60354
Unauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboot...
EUVD-2025-36546
Unauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboot...
CVE-2025-60354
Unauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboot...
PT-2025-44193
Name of the Vulnerable Software and Affected Versions blog-vue-springboot affected versions not specified Description An issue exists that allows for the unauthorized modification of articles. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...
CVE-2025-60354
The blog-vue-springboot project, a blog application developed by Minghui Shi, contains a security vulnerability that allows for the unauthorized modification of arbitrary articles . The root cause stems from allowing unauthorized arbitrary post modifications. There is currently no information ava...
blog-vue-springboot 安全漏洞
blog-vue-springboot is a blog project by the individual developer Minghui Shi. A security vulnerability exists in blog-vue-springboot that stems from allowing unauthorized arbitrary post modifications...
CVE-2025-60354
Unauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboot...
CVE-2025-60354
Unauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboot...
EUVD-2021-13760
Malware in sbrugna...
EUVD-2018-9123
Malware in sbrugna...