CVE-2025-67342

The RuoYi backend management system (versions 4.8.1 and earlier ) is vulnerable to a stored cross-site scripting (XSS) flaw in the /system/menu/edit endpoint. Although an XSS filter is present, it can be bypassed, allowing an attacker with menu modification permissions to impact all users because...

PT-2025-50954

Name of the Vulnerable Software and Affected Versions RuoYi versions 4.8.1 and earlier Description The software contains a stored cross-site scripting XSS issue in the /system/menu/edit API endpoint. The existing XSS filter can be bypassed, allowing for exploitation. Because the menu is shared...

Linux Distros Unpatched Vulnerability : CVE-2025-3580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An access control vulnerability was discovered in Grafana OSS where an Organization administrator could permanently delete the Server administrator account. Thi...