vue-i18n 安全漏洞

vue-i18n is an application from intlify open source. A security vulnerability exists in vue-i18n. An attacker can execute arbitrary commands by exploiting the vulnerability...

CVE-2025-2040

A vulnerability classified as critical was found in zhijiantianya ruoyi-vue-pro 2.4.1. Affected by this vulnerability is an unknown functionality of the file /admin-api/bpm/model/deploy. The manipulation leads to improper neutralization of special elements used in a template engine. The attack ca...

CVE-2025-2040

A vulnerability classified as critical was found in zhijiantianya ruoyi-vue-pro 2.4.1. Affected by this vulnerability is an unknown functionality of the file /admin-api/bpm/model/deploy. The manipulation leads to improper neutralization of special elements used in a template engine. The attack ca...

CVE-2025-2040 zhijiantianya ruoyi-vue-pro deploy special elements used in a template engine

A vulnerability classified as critical was found in zhijiantianya ruoyi-vue-pro 2.4.1. Affected by this vulnerability is an unknown functionality of the file /admin-api/bpm/model/deploy. The manipulation leads to improper neutralization of special elements used in a template engine. The attack ca...

CVE-2025-2040

CVE-2025-2040 affects zhijiantianya ruoyi-vue-pro 2.4.1. The vulnerability involves an unknown functionality at the file path /admin-api/bpm/model/deploy where improper neutralization of special elements in a template engine can be exploited. It is exploitable remotely and, per sources, the explo...

ruoyi-vue-pro 安全漏洞

ruoyi-vue-pro is a Taro Road source code zhijiantianya open source an optimized and refactored efficient backend management system framework for the development of enterprise backend , SaaS platform , WeChat small program backend and so on. ruoyi-vue-pro 2.4.1 version of a security vulnerability ...

Malicious code in vue-custom-widget-template1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21b54ec1679cbeb92bfd2aaa272446918c32899d07a1fc5e4211c07323790f26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2117 Malicious code in my-custom-vue-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45c516cbd7bda6255ce1f5a2b53f65970a24bb84aa4fc373041f73a440b8ae41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2138 Malicious code in vue-custom-widget-template1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21b54ec1679cbeb92bfd2aaa272446918c32899d07a1fc5e4211c07323790f26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0efc0a22034000a68b77f7b5cfddbb864cc72d9bb239e7fe1af0feb7643d1ae3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2139 Malicious code in vue-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0efc0a22034000a68b77f7b5cfddbb864cc72d9bb239e7fe1af0feb7643d1ae3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-25570

Vue Vben Admin 2.10.1 allows unauthorized login to the backend due to an issue with hardcoded credentials...

CVE-2025-25570

Vue Vben Admin 2.10.1 allows unauthorized login to the backend due to an issue with hardcoded credentials...

PT-2025-9029

Name of the Vulnerable Software and Affected Versions Vue Vben Admin version 2.10.1 Description The issue allows unauthorized login to the backend due to an problem with hardcoded credentials. Recommendations For Vue Vben Admin version 2.10.1, update to a version that removes the hardcoded...

CVE-2025-25570

CVE-2025-25570 affects Vue Vben Admin 2.10.1, with a broken authentication flaw caused by hardcoded credentials that allows unauthorized login to the backend. The Nuclei template explicitly documents a default-credentials scenario and the Red Hat/NVD entries reiterate unauthorized backend access ...

CVE-2024-11628

In Progress® Telerik® Kendo UI for Vue versions v2.4.0 through v6.0.1, an attacker can introduce or modify properties within the global prototype chain which can result in denial of service or command injection...

CVE-2024-11628

In Progress® Telerik® Kendo UI for Vue versions v2.4.0 through v6.0.1, an attacker can introduce or modify properties within the global prototype chain which can result in denial of service or command injection...

CVE-2024-11628

In Progress® Telerik® Kendo UI for Vue versions v2.4.0 through v6.0.1, an attacker can introduce or modify properties within the global prototype chain which can result in denial of service or command injection...

CVE-2024-11628

Affected software: Progress Telerik Kendo UI for Vue. Vulnerable as per CVE-2024-11628 in versions v2.4.0 through v6.0.1. Root cause: prototype pollution via ability to introduce or modify properties in the global prototype chain, which can lead to denial of service or command injection. Document...

PT-2025-6508 · Telerik · Kendo Ui

Name of the Vulnerable Software and Affected Versions: In Progress Telerik Kendo UI for Vue versions v2.4.0 through v6.0.1 Description: The issue allows an attacker to introduce or modify properties within the global prototype chain, which can result in denial of service or command injection...