CVE-2025-66744

Yonyou YonBIP version 3 and earlier are vulnerable to a path traversal flaw in the LoginWithV8 interface of the series data application service system. This vulnerability is caused by improper validation, potentially allowing unauthorized attackers to access sensitive information within the syste...

PT-2024-14329

Name of the Vulnerable Software and Affected Versions YonBIP version 3 23.05 Description An arbitrary file upload vulnerability in the doAction method of nccloud.web.arcp.taskmonitor.action.ArcpUploadAction allows attackers to execute arbitrary code via uploading a crafted file. Recommendations F...