PT-2025-53795

Name of the Vulnerable Software and Affected Versions Crocoblock JetBlog versions through 2.4.7 Description An authorization issue exists in Crocoblock JetBlog, allowing exploitation of incorrectly configured access control security levels. This can lead to unauthorized access. Recommendations...

Xiaozhi ESP32 Server Java 授权问题漏洞

Xiaozhi ESP32 Server Java is a Java enterprise management platform for joey individual developers. An authorization issue vulnerability exists in Xiaozhi ESP32 Server Java 3.0.0 and earlier versions, which stems from a misbehavior of the function tryAuthenticateWithCookies in the file...

JeecgBoot 授权问题漏洞

JeecgBoot is a low-code development platform that fuses code generation and AI applications to help organizations rapidly achieve low-code development and build AI applications. JeecgBoot suffers from an authorization issue vulnerability, which stems from improper authorization of the parameter...

JeecgBoot 授权问题漏洞

JeecgBoot is a low-code development platform that fuses code generation and AI applications to help organizations rapidly achieve low-code development and build AI applications. JeecgBoot suffers from an authorization issue vulnerability that stems from improper authorization in the file...

mall 授权问题漏洞

mall is an e-commerce system for macro individual developers, including frontend mall system and backend management system. An authorization issue vulnerability exists in macrozheng mall 1.0.3 and earlier versions, which stems from incorrect manipulation of the file /member/address/update/, which...

JeecgBoot 授权问题漏洞

JeecgBoot is a low-code development platform that fuses code generation and AI applications to help organizations rapidly achieve low-code development and build AI applications. JeecgBoot has an authorization issue vulnerability that originates from improper authorization of parameter deptId in t...

CVE-2025-68938

CVE-2025-68938 affects Gitea prior to 1.25.2, where the authorization for deleting releases is mishandled. The issue enables an attacker with minimal privileges to delete project releases, potentially leading to loss of assets and distribution history. Public references indicate the fix is in Git...

Alteryx Server 授权问题漏洞

Alteryx Server is a cloud-hosted or self-hosted application from Alteryx, Inc. It is used to publish, share and execute workflows. An authorization issue vulnerability exists in Alteryx Server that stems from improper authentication in the file /gallery/api/status/, which could lead to a remote...

CVE-2025-15087 youlaitech youlai-mall OrderController.java submitOrderPayment improper authorization

A security vulnerability has been detected in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function submitOrderPayment of the file mall-oms/oms-boot/src/main/java/com/youlai/mall/oms/controller/app/OrderController.java. Such manipulation of the argument orderSn leads to improper...

PT-2025-53098

Name of the Vulnerable Software and Affected Versions Sunshine Photo Cart versions through 3.5.7.1 Description An authorization issue exists in Sunshine Photo Cart that allows exploitation of incorrectly configured access control security levels. Recommendations Update Sunshine Photo Cart to a...

PT-2025-53283

Name of the Vulnerable Software and Affected Versions Trustindex Widgets for Social Photo Feed versions through 1.7.7 Description An authorization issue exists in Trustindex Widgets for Social Photo Feed. The issue involves incorrectly configured access control security levels, potentially allowi...

PT-2025-53265

Name of the Vulnerable Software and Affected Versions Virusdie versions n/a through 1.1.6 Description An authorization issue exists in Virusdie, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Virusdie to a version later than 1.1.6...

PT-2025-53284

Name of the Vulnerable Software and Affected Versions Bit Assist versions through 1.5.11 Description An authorization issue exists in Bit Apps Bit Assist. The problem involves incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendations Update B...

PT-2025-53266

Name of the Vulnerable Software and Affected Versions Addonify versions prior to and including 2.0.4 Description An authorization issue exists in the Addonify addonify-quick-view component, allowing exploitation of incorrectly configured access control security levels. Recommendations Update...

PT-2025-53276

Name of the Vulnerable Software and Affected Versions totalsoft TS Poll versions through 2.5.3 Description An authorization issue exists in totalsoft TS Poll poll-wp due to incorrectly configured access control security levels. This allows for potential exploitation of the system. Recommendations...

WordPress plugin WP Telegram Widget and Join Link 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A security...

PT-2025-53270

Name of the Vulnerable Software and Affected Versions Funnelforms versions prior to 3.9 Description An authorization issue exists in Funnelforms Free that allows exploitation of incorrectly configured access control security levels. Recommendations Update to version 3.9 or later...

PT-2025-53291

Name of the Vulnerable Software and Affected Versions Marketing Fire Editorial Calendar versions 3.8.8 and earlier Description An authorization issue exists in the Editorial Calendar component of Marketing Fire Editorial Calendar. This allows exploitation of incorrectly configured access control...

PT-2025-53089

Name of the Vulnerable Software and Affected Versions wpstream versions through 4.9.5 Description An authorization issue exists in wpstream WpStream wpstream. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendations At the...

PT-2025-53274

Name of the Vulnerable Software and Affected Versions Gora Tech Cooked versions through 1.11.2 Description An authorization issue exists in Gora Tech Cooked, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update Gora Tech Cooked to a version...