2576 matches found
CVE-2025-58681 WordPress Easy Quotes Plugin <= 1.2.4 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Jürgen Müller Easy Quotes easy-quotes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Quotes: from n/a through = 1.2.4...
Weitong Mall 授权问题漏洞
Weitong Mall Weitong Mall is a shopping mall system by fuyanglipengjun individual developer. An authorization issue vulnerability exists in Weitong Mall version 1.0, which originates from improper authorization of the TopicController function in the file /topic/queryAll, and could lead to a remot...
Linux Distros Unpatched Vulnerability : CVE-2025-41249
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type wit...
CVE-2025-10674
A vulnerability was identified in fuyanglipengjun platform 1.0. This affects the function AttributeCategoryController of the file /attributecategory/queryAll. Such manipulation leads to improper authorization. The attack may be launched remotely. The exploit is publicly available and might be use...
ZTE T5400 License Issue Vulnerability
The ZTE T5400 is a router from China's ZTE Corporation ZTE. The ZTE T5400 suffers from an authorization issue vulnerability, which stems from improper control of web module interface privileges, and can be exploited by an attacker to obtain sensitive information...
CVE-2025-31255
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, watchOS 26. An app may be able to access sensitive user data...
RuoYi License Issue Vulnerability
RuoYi is a backend management system for individual developers in China RuoYi RuoYi. RuoYi 4.8.1 and previous versions of the authorization problem vulnerability, the vulnerability stems from the file / system / role / authUser / cancelAll in the parameter roleId and userIds there is improper...
CVE-2025-31255
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, watchOS 26. An app may be able to access sensitive user data...
CVE-2025-31255
An authorization issue was addressed with improved state management. This issue is fixed in tvOS 26, watchOS 26, macOS Sonoma 14.8, iOS 26 and iPadOS 26, macOS Sequoia 15.7. An app may be able to access sensitive user data...
CVE-2025-31255
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, watchOS 26. An app may be able to access sensitive user data...
CVE-2025-31255
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, watchOS 26. An app may be able to access sensitive user data...
CVE-2025-31255
CVE-2025-31255 is an authorization issue fixed by Apple in tvOS 26, watchOS 26, macOS Sonoma 14.8, iOS 26, and iPadOS 26, and macOS Sequoia 15.7. The vulnerability could allow an app to access sensitive user data due to improved state management. Connected sources provide explicit remediation thr...
CVE-2025-10422
CVE-2025-10422 affects the newbee-mall Order Status Handler, specifically the paySuccess function in the /paySuccess file. The vulnerability arises from manipulating the orderNo parameter, causing improper authorization. Remote exploitation is possible and the exploit has been publicly disclosed....
PT-2025-37782
Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.8 macOS Sequoia versions prior to 15.7 macOS Tahoe versions prior to 26 tvOS versions prior to 26 watchOS versions prior to 26 iOS versions prior to 26 iPadOS versions prior to 26 Description: An authorizatio...
Sixun Business Management System 授权问题漏洞
Sixun Business Management System is a business management system from Sixun, a Chinese company. An authorization issue vulnerability exists in Sixun Business Management System version 7/11, which originates from an improper authorization in File/Adm/OperatorStop and could lead to a remote attack...
CVE-2025-10291 linlinjava litemall cancel WxAftersaleController improper authorization
A weakness has been identified in linlinjava litemall up to 1.8.0. This affects the function WxAftersaleController of the file /wx/aftersale/cancel. Executing manipulation of the argument ID can lead to improper authorization. The attack can be executed remotely. The exploit has been made availab...
Wavlink WL-WN578W2 授权问题漏洞
The Wavlink WL-WN578W2 is a wireless repeater from China's Wavlink. An authorization issue vulnerability exists in Wavlink WL-WN578W2 version 221110, which stems from improper privilege management of the parameter newpass/confpass in the file /sysinit.html, which can be exploited by an attacker t...
Flask App Builder 授权问题漏洞
Flask App Builder is a simple and fast application development framework by Daniel Vaz Gaspar Personal Developer. An authorization issue vulnerability exists in Flask App Builder versions prior to 4.8.1, which stems from not disabling the password reset feature when using a non-database...
Hoverfly 授权问题漏洞
Hoverfly is a lightweight open source API emulation tool open-sourced by SpectoLabs. An authorization issue vulnerability exists in Hoverfly 1.11.3 and earlier versions that originates from an unprotected WebSocket endpoint and could lead to information disclosure...