EUVD-2025-13430

Malicious code in bioql PyPI...

CVE-2025-45608

Incorrect access control in the /system/user/findUserList API of Xinguan v0.0.1-SNAPSHOT allows attackers to access sensitive information via a crafted payload...

CVE-2025-45608

Incorrect access control in the /system/user/findUserList API of Xinguan v0.0.1-SNAPSHOT allows attackers to access sensitive information via a crafted payload...

CVE-2025-45608

Incorrect access control in the /system/user/findUserList API of Xinguan v0.0.1-SNAPSHOT allows attackers to access sensitive information via a crafted payload...

CVE-2025-45608

The Xinguan crown material management system (v0.0.1-SNAPSHOT ) is vulnerable to incorrect access control in the /system/user/findUserList API endpoint. An attacker can use a crafted payload to bypass security measures and access sensitive information . As a temporary workaround, it is recommende...

CVE-2025-45608

Incorrect access control in the /system/user/findUserList API of Xinguan v0.0.1-SNAPSHOT allows attackers to access sensitive information via a crafted payload...

PT-2025-19776 · Xinguan · Xinguan

Name of the Vulnerable Software and Affected Versions: Xinguan version 0.0.1-SNAPSHOT Description: The issue is related to incorrect access control in the "/system/user/findUserList" API endpoint, which allows attackers to access sensitive information by sending a crafted payload. Recommendations...

CVE-2025-45608: Improper Access Control

Incorrect access control in the /system/user/findUserList API of Xinguan v0.0.1-SNAPSHOT allows attackers to access sensitive information via a crafted payload...

CVE-2025-45608

Incorrect access control in the /system/user/findUserList API of Xinguan v0.0.1-SNAPSHOT allows attackers to access sensitive information via a crafted payload...

Xinguan security vulnerabilities

xinguan is a new crown material management system by zykzhangyukang Individual Developer. A security vulnerability exists in xinguan version v0.0.1, which stems from improper access control of the /system/user/findUserList API, which could lead to access to sensitive information...