CVE-2025-9297

creationtimestamp| type| source ---|---|--- 2025-08-21 14:18:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lww53uejso2p...

CVE-2025-55368

Incorrect access control in the component \controller\RoleController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier status under any account...

CVE-2025-55367

Incorrect access control in the component \controller\SupplierController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier status under any account...

CVE-2025-52287

creationtimestamp| type| source ---|---|--- 2025-08-21 13:49:15+00:00| seen| https://gist.github.com/ChangeYourWay/5bf54a234611f14fba1af03ad91e62f8 2025-08-22 20:36:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwzco23nyo2p 2026-07-17 07:00:04+00:00| published-proof-of-concept|...

CVE-2025-8607

creationtimestamp| type| source ---|---|--- 2025-08-21 10:18:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwvpodwluj22...

CVE-2025-7221

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the giveupdatepaymentstatus function in all versions up to, and including, 4.5.0. This makes it possible for authenticated attackers,...

CVE-2025-7221 GiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Missing Authorization to Donation Update

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the giveupdatepaymentstatus function in all versions up to, and including, 4.5.0. This makes it possible for authenticated attackers,...

CVE-2025-7221

The CVE concerns GiveWP – Donation Plugin and Fundraising Platform for WordPress (versions

CVE-2025-9323

creationtimestamp| type| source ---|---|--- 2025-08-21 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-869/ 2025-09-03 01:14:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxvhedbety2n...

CVE-2025-57749

creationtimestamp| type| source ---|---|--- 2025-08-21 02:55:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwuwwfx4fd2t...

CVE-2024-57154

creationtimestamp| type| source ---|---|--- 2025-08-21 00:23:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwuofzwp2v2g...

jshERP 安全漏洞

jshERP Huaxia ERP is a homegrown ERP system by the individual developer of Ji Sheng Hua in China. A security vulnerability exists in jshERP version v3.5, which stems from improper access control in the RoleController.java component and could lead to modification of vendor status...

CVE-2025-55367

Incorrect access control in the component \controller\SupplierController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier status under any account...

CVE-2025-55367

Incorrect access control in the component \controller\SupplierController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier status under any account...

CVE-2025-55367

CVE-2025-55367 affects jshERP v3.5 due to an incorrect access-control flaw in the SupplierController.java component. This vulnerability permits unauthorized attackers to arbitrarily modify the supplier status under any account. Documents consistently describe the issue and target component, but d...

Linux Distros Unpatched Vulnerability : CVE-2025-27404

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an...

jshERP 安全漏洞

jshERP Huaxia ERP is a homegrown ERP system by the individual developer of Ji Sheng Hua in China. A security vulnerability exists in jshERP v3.5, which stems from improper access control in the SupplierController.java component and could lead to modification of the supplier status...

PT-2025-34219 · Jsherp · Jsherp

Name of the Vulnerable Software and Affected Versions: jshERP version 3.5 Description: An incorrect access control issue exists in the controllerSupplierController.java component of jshERP version 3.5. This allows unauthorized attackers to arbitrarily modify the supplier status. Recommendations:...

PT-2025-34232 · Sourcecodester · Online Bank Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Bank Management System version 1.0 Description: A weakness has been identified that allows for SQL injection. The issue impacts an unknown function within the /bank/show.php file. Manipulation of the ID argument can lead...

Linux Distros Unpatched Vulnerability : CVE-2021-40574

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gftextgetutf8line function in loadtext.c, which allows attackers to...