9034 matches found
CVE-2025-9391
Vulnerability CVE-2025-9391 affects Bjskzy Zhiyou ERP (versions up to 11.x). The flaw is in com.artery.workflow.ServiceImpl.getFieldValue, where improper handling of the sql argument enables SQL injection. Exploitation can be remote and publicly available PoCs are reported. Affected products and ...
Automation Is Redefining Pentest Delivery
Pentesting remains one of the most effective ways to identify real-world security weaknesses before adversaries do. But as the threat landscape has evolved, the way we deliver pentest results hasn't kept pace. Most organizations still rely on traditional reporting methods—static PDFs, emailed...
CVE-2025-8450
Improper Access Control issue in the Workflow component of Fortra's FileCatalyst allows unauthenticated users to upload arbitrary files via the order forms page...
@ai-growth/n8n-nodes-wordpress (>=0.2.0, <=0.6.12), @henry2323/n8n-nodes-calendar-tool-wrapper (0.1.4) +31 more potentially affected by CVE-2025-57749 via n8n-core (>=1.0.0, <=1.105.3)
n8n-core NPM version =1.0.0, =0.2.0, =1.0.1, =0.21.8, =1.0.0, =1.0.0, =0.1.0, =0.3.3, =0.1.3, =0.1.1, =1.2.0, =0.1.1, =0.4.1, =1.1.0, =1.2.3 - n8n-nodes-fxcm 1.0.1 and more Source cves: CVE-2025-57749 Source advisory: SNYK:JS-N8NCORE-12081401...
PrintWorkflowUserSvc Privilege Escalation
The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2025-50503
A vulnerability in the password reset workflow of the Touch Lebanon Mobile App version 2.20.2 allows an attacker to bypass the OTP reset password mechanism . By manipulating the reset process, an unauthorized user can reset the password and gain access to the account without providing a legitimat...
CVE-2025-8450
Improper Access Control issue in the Workflow component of Fortra's FileCatalyst allows unauthenticated users to upload arbitrary files via the order forms page...
CVE-2025-8450
The CVE-2025-8450 entry concerns Fortra FileCatalyst Workflow. The vulnerability arises from an Improper Access Control issue in the Workflow component that allows unauthenticated users to upload arbitrary files via the order forms page. Documents consistently identify this as an unrestricted fil...
CVE-2025-8450 Unrestricted File Upload in FileCatalyst
Improper Access Control issue in the Workflow component of Fortra's FileCatalyst allows unauthenticated users to upload arbitrary files via the order forms page...
Fortra FileCatalyst Workflow security vulnerability
Fortra FileCatalyst Workflow is a file transfer management component from US-based Fortra. A security vulnerability exists in Fortra FileCatalyst Workflow that stems from improper access control and could allow an unauthenticated user to upload arbitrary files...
PT-2025-33750 · N8N · N8N
Name of the Vulnerable Software and Affected Versions: n8n versions 1.77.0 through 1.98.1 Description: n8n is a workflow automation platform. A stored Cross-Site Scripting XSS vulnerability exists in the Form Trigger node's HTML form element. An authenticated attacker can inject malicious HTML vi...
PT-2025-33838
Name of the Vulnerable Software and Affected Versions: Fortra FileCatalyst versions affected versions not specified Description: An improper access control issue exists in the Workflow component of Fortra FileCatalyst. This allows unauthenticated users to upload arbitrary files via the order form...
CVE-2025-8450: Unrestricted Upload of File with Dangerous Type
Improper Access Control issue in the Workflow component of Fortra's FileCatalyst allows unauthenticated users to upload arbitrary files via the order forms page...
Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Buinses Automation Workflow (CVE-2025-33142)
Summary WebSphere Application Server traditional is shipped as a component of IBM Business Automation Workflow. Information about a security vulnerability affecting IBM WebSphere Application Server Traditional have been published in a security bulletin. Vulnerability Details Refer to the security...
CVE-2025-55192
HomeAssistant-Tapo-Control offers Control for Tapo cameras as a Home Assistant component. Prior to commit 2a3b80f, there is a code injection vulnerability in the GitHub Actions workflow .github/workflows/issues.yml. It does not affect users of the Home Assistant integration itself — it only impac...
Malicious code in actions-workflow-tools (npm)
The package actions-workflow-tools was found to contain malicious code...
MAL-2025-14042 Malicious code in actions-workflow-tools (npm)
The package actions-workflow-tools was found to contain malicious code...
MAL-2025-14737 Malicious code in approval-workflow (npm)
The package approval-workflow was found to contain malicious code...