CVE-2025-10278: Improper Authorization

A flaw has been found in YunaiV ruoyi-vue-pro up to 2025.09. Impacted is an unknown function of the file /crm/contact/transfer. This manipulation of the argument ids/newOwnerUserId causes improper authorization. The attack is possible to be carried out remotely. The exploit has been published and...

CVE-2025-10276: Improper Authorization

A security vulnerability has been detected in YunaiV ruoyi-vue-pro up to 2025.09. This vulnerability affects unknown code of the file /crm/contract/transfer. The manipulation of the argument id/newOwnerUserId leads to improper authorization. Remote exploitation of the attack is possible. The...

ruoyi-vue-pro 授权问题漏洞

ruoyi-vue-pro is China's Taro Road source code zhijiantianya open source an optimized refactoring of the efficient backend management system framework for the development of enterprise backend , SaaS platforms , WeChat small program backend and so on. ruoyi-vue-pro 2025.09 and previous versions o...

PT-2025-37280

Name of the Vulnerable Software and Affected Versions: YunaiV ruoyi-vue-pro versions prior to 2025.09 Description: A flaw exists in YunaiV ruoyi-vue-pro that allows for improper authorization. The issue is related to the manipulation of the ids/newOwnerUserId argument within an unknown function o...

Improper Encoding or Escaping of Output

Overview element-plus is an A Component Library for Vue 3 Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via the href attribute handling in the el-link component. An attacker can execute arbitrary scripts, redirect users to malicious sites, or conduct...

MAL-2025-42967 Malicious code in @tt4b-vmok/standalone-vue (npm)

The package @tt4b-vmok/standalone-vue was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2024-9506

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper regular expression in Vue's parseHTML function leads to a potential regular expression denial of service vulnerability. CVE-2024-9506 Note that Nessus...

Malicious code in vite-plugin-vue-extend-plugin (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6968 Malicious code in vite-plugin-vue-extend-plugin (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @zalastax/nolb-_vue_ (npm)

The package @zalastax/nolb-vue was found to contain malicious code...

Malicious code in fin-vue-cli (npm)

The package fin-vue-cli was found to contain malicious code...

Malicious code in log4js-vue-log-bus (npm)

The package log4js-vue-log-bus was found to contain malicious code...

Malicious code in vue-build-no-ssr (npm)

The package vue-build-no-ssr was found to contain malicious code...

Malicious code in vue-cli-nb-no (npm)

The package vue-cli-nb-no was found to contain malicious code...

Malicious code in vue-custom-directives (npm)

The package vue-custom-directives was found to contain malicious code...

Malicious code in vue-pwa (npm)

The package vue-pwa was found to contain malicious code...

Malicious code in vue-stock-chart (npm)

The package vue-stock-chart was found to contain malicious code...

Malicious code in vue-storefront-stripe (npm)

The package vue-storefront-stripe was found to contain malicious code...

Malicious code in weapp-vue (npm)

The package weapp-vue was found to contain malicious code...

Malicious code in @bazel-example/vue-library (npm)

The package @bazel-example/vue-library was found to contain malicious code...