79 matches found
Yonyou YonBIP - Path Traversal
Yonyou YonBIP v3 and before contains a path traversal caused by improper validation in the LoginWithV8 interface of the series data application service system, letting unauthorized attackers access sensitive information. id: CVE-2025-66744 info: name: Yonyou YonBIP - Path Traversal author:...
VulnCheck KEV: CVE-2025-66744
In Yonyou YonBIP v3 and before, the LoginWithV8 interface in the series data application service system is vulnerable to path traversal, allowing unauthorized access to sensitive information within the system...
CVE-2025-66744
In Yonyou YonBIP v3 and before, the LoginWithV8 interface in the series data application service system is vulnerable to path traversal, allowing unauthorized access to sensitive information within the system...
CVE-2025-66744
In Yonyou YonBIP v3 and before, the LoginWithV8 interface in the series data application service system is vulnerable to path traversal, allowing unauthorized access to sensitive information within the system...
CVE-2025-66744
In Yonyou YonBIP v3 and before, the LoginWithV8 interface in the series data application service system is vulnerable to path traversal, allowing unauthorized access to sensitive information within the system...
CVE-2025-66744: Improper Limitation of a Pathname to a Restricted Directory
In Yonyou YonBIP v3 and before, the LoginWithV8 interface in the series data application service system is vulnerable to path traversal, allowing unauthorized access to sensitive information within the system...
Yonyou YonBIP 安全漏洞
Yonyou YonBIP is a business innovation platform from China's Yonyou Corporation. A security vulnerability exists in Yonyou YonBIP 3 and prior versions, which stems from a path traversal in the LoginWithV8 interface that could lead to unauthorized access to sensitive information...
CVE-2025-66744
In Yonyou YonBIP v3 and before, the LoginWithV8 interface in the series data application service system is vulnerable to path traversal, allowing unauthorized access to sensitive information within the system...
CVE-2025-66744
The Yonyou YonBIP business innovation platform (versions v3 and before ) is vulnerable to a path traversal flaw in the LoginWithV8 interface of the series data application service system. This vulnerability is caused by improper validation of inputs, which allows unauthorized attackers to access ...
EUVD-2025-10880
Malicious code in bioql PyPI...
EUVD-2023-56608
Malicious code in bioql PyPI...
EUVD-2023-56604
Malicious code in bioql PyPI...
EUVD-2023-56607
Malicious code in bioql PyPI...
EUVD-2023-56605
Malicious code in bioql PyPI...
CVE-2023-51927
YonBIP v323.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runScript method...
CVE-2023-51926
YonBIP v323.05 was discovered to contain an arbitrary file read vulnerability via the nc.bs.framework.comn.serv.CommonServletDispatcher component...
CVE-2023-51924
An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v323.05 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2023-51906
An issue in yonyou YonBIP v323.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component...
CVE-2023-51928
An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction method of YonBIP v323.05 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2023-51925
An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction method of YonBIP v323.05 allows attackers to execute arbitrary code via uploading a crafted file...