CVE-2025-13118: Improper Authorization

A vulnerability was detected in macrozheng mall-swarm up to 1.0.3. Affected by this issue is the function paySuccess of the file /order/paySuccess. The manipulation of the argument orderID results in improper authorization. The attack can be launched remotely. The exploit is now public and may be...

CVE-2025-13117: Improper Authorization

A security vulnerability has been detected in macrozheng mall-swarm and mall up to 1.0.3. Affected by this vulnerability is the function cancelOrder of the file /order/cancelOrder. The manipulation of the argument orderId leads to improper authorization. The attack can be initiated remotely. The...

CVE-2025-13116: Improper Authorization

A weakness has been identified in macrozheng mall-swarm and mall up to 1.0.3. Affected is the function cancelUserOrder of the file /order/cancelUserOrder. Executing manipulation of the argument orderId can lead to improper authorization. It is possible to launch the attack remotely. The exploit h...

mall-swarm 授权问题漏洞

mall-swarm is a microservice mall system. There is an authorization issue vulnerability in mall-swarm, which originates from an improper authorization issue in the updateAttr function in the file /cart/update/attr. No detailed vulnerability details are available at this time...

PT-2025-46826

A vulnerability was identified in macrozheng mall-swarm up to 1.0.3. This affects the function updateAttr of the file /cart/update/attr. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was...

PT-2025-46833

Name of the Vulnerable Software and Affected Versions macrozheng mall-swarm versions up to 1.0.3 Description A flaw exists in macrozheng mall-swarm that allows for remote authorization bypass due to improper authorization. The issue is related to the paySuccess function within the /order/paySucce...

PT-2025-46827

Name of the Vulnerable Software and Affected Versions macrozheng mall-swarm versions up to 1.0.3 macrozheng mall versions up to 1.0.3 Description A security flaw exists due to improper authorization when manipulating the orderId argument in the function detail of the Order Details Handler...

EUVD-2023-1167

Malicious code in bioql PyPI...

EUVD-2022-3470

Malicious code in bioql PyPI...

EUVD-2022-5531

Malicious code in bioql PyPI...

EUVD-2023-2359

Malicious code in bioql PyPI...

EUVD-2023-1150

Malicious code in bioql PyPI...

EUVD-2022-4780

Malicious code in bioql PyPI...

EUVD-2022-4310

Malicious code in bioql PyPI...

EUVD-2023-1220

Malicious code in bioql PyPI...

MAL-2025-31954 Malicious code in redux-swarm (npm)

The package redux-swarm was found to contain malicious code...

Malicious code in redux-swarm (npm)

The package redux-swarm was found to contain malicious code...

Resource-Efficient Automatic Software Vulnerability Assessment Via Knowledge Distillation and Particle Swarm Optimization

The increasing complexity of software systems has led to a surge in cybersecurity vulnerabilities, necessitating efficient and scalable solutions for vulnerability assessment. However, the deployment of large pre-trained models in real-world scenarios is hindered by their substantial computationa...

K000152602: Multiple Moby vulnerabilities

Security Advisory Description CVE-2023-28840 Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby, is common...

A Retrospective on DISPEED -- Leveraging Heterogeneity in a Drone Swarm for IDS Execution

Swarms of drones are gaining more and more autonomy and efficiency during their missions. However, security threats can disrupt their missions' progression. To overcome this problem, Network Intrusion Detection Systems NIDS are promising solutions to detect malicious behavior on network traffic...