1029 matches found
CVE-2025-68943
Gitea before 1.21.8 inadvertently discloses users' login times by allowing for example the lastlogintime explore/users sort order...
CVE-2025-15094
A weakness has been identified in sunkaifei FlyCMS up to abbaa5a8daefb146ad4d61027035026b052cb414. The impacted element is the function userLogin of the file src/main/java/com/flycms/web/front/UserController.java of the component User Login. Executing a manipulation of the argument redirectUrl ca...
CVE-2025-15094
A weakness has been identified in sunkaifei FlyCMS up to abbaa5a8daefb146ad4d61027035026b052cb414. The impacted element is the function userLogin of the file src/main/java/com/flycms/web/front/UserController.java of the component User Login. Executing a manipulation of the argument redirectUrl ca...
CVE-2025-15094 sunkaifei FlyCMS User Login UserController.java userLogin cross site scripting
A weakness has been identified in sunkaifei FlyCMS up to abbaa5a8daefb146ad4d61027035026b052cb414. The impacted element is the function userLogin of the file src/main/java/com/flycms/web/front/UserController.java of the component User Login. Executing a manipulation of the argument redirectUrl ca...
CVE-2025-15094 sunkaifei FlyCMS User Login UserController.java userLogin cross site scripting
A weakness has been identified in sunkaifei FlyCMS up to abbaa5a8daefb146ad4d61027035026b052cb414. The impacted element is the function userLogin of the file src/main/java/com/flycms/web/front/UserController.java of the component User Login. Executing a manipulation of the argument redirectUrl ca...
CVE-2025-15094
CVE-2025-15094 affects sunkaifei FlyCMS, with the vulnerability located in the User Login path: the function userLogin in src/main/java/com/flycms/web/front/UserController.java. The issue arises from manipulating the redirectUrl parameter, leading to cross-site scripting. The weaknesses are remot...
sunkaifei FlyCms 代码注入漏洞
sunkaifei FlyCms is a sunkaifei open source application . A similar to Zhihu to Q&A based completely open source JAVA language development of social networking site building program. A code injection vulnerability exists in sunkaifei FlyCms, which originates from a misbehavior of the userLogin...
PT-2025-53432
Name of the Vulnerable Software and Affected Versions FlyCMS affected versions not specified Description A flaw exists in the User Login functionality of FlyCMS. Specifically, manipulation of the redirectUrl argument within the userLogin function in the file...
CVE-2025-15016 Ragic｜Enterprise Cloud Database - Hard-coded Cryptographic Key
Enterprise Cloud Database developed by Ragic has a Hard-coded Cryptographic Key vulnerability, allowing unauthenticated remote attackers to exploit the fixed key to generate verification information and log into the system as any user...
CVE-2025-34439
Summary: CVE-2025-34439 affects AVideo versions prior to 20.1, with an open redirect flaw during user login due to missing validation of the cancelUri parameter. What’s affected: AVideo before version 20.1. Root cause: Lack of input validation on cancelUri during login, enabling an attacker to cr...
PT-2025-50766
Name of the Vulnerable Software and Affected Versions KodExplorer version 4.52 Description KodExplorer 4.52 contains an open redirect issue in the user login page. Attackers can manipulate the link parameter to redirect users to arbitrary external websites after authentication. The vulnerable...
Fortra GoAnywhere MFT 安全漏洞
Fortra GoAnywhere MFT is a file transfer software from Fortra, Inc. A security vulnerability exists in Fortra GoAnywhere MFT versions prior to 7.9.0, which stems from improper access control of the SFTP service, and could result in a Web user logging in with an SSH key...
EUVD-2024-55112
IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as administrator without a password...
CVE-2024-45675
CVE-2024-45675 affects IBM Informix Dynamic Server 14.10 on Windows, where a local user can log into the Informix server as administrator without a password due to authentication bypass in DB-Access. The issue is confirmed by multiple sources, including IBM’s bulletin detailing vulnerable configu...
CVE-2025-13768
WebITR developed by Uniong has an Authentication Bypass vulnerability, allowing authenticated remote attackers to log into the system as any user by modifying a specific parameter. Attackers must first obtain a user ID to exploit this vulnerability...
CVE-2025-13768 Uniong｜WebITR - Authorization Bypass
WebITR developed by Uniong has an Authentication Bypass vulnerability, allowing authenticated remote attackers to log into the system as any user by modifying a specific parameter. Attackers must first obtain a user ID to exploit this vulnerability...
CVE-2025-12592
Legacy Vivotek Device firmware uses default credetials for the root and user login accounts...
CVE-2025-12592
Legacy Vivotek Device firmware uses default credetials for the root and user login accounts...