spring-boot-admin 注入漏洞

spring-boot-admin is a codecentric open source based on Spring boot Mybatis open source backend management system , with user management , menu management and role management 3 functions , permission control to the button level . spring-boot-admin version 1.0 there are injection vulnerabilities ,...

Timing Attack

Overview org.springframework.security:spring-security-crypto is a spring-security-crypto library for Spring Security. Affected versions of this package are vulnerable to Timing Attack due to an unintentional bypass for DaoAuthenticationProvider constant time controls, which was caused by the fix...

CVE-2025-25590

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the component /mapper/xml/AddressDao.xml...

CVE-2025-1227

A vulnerability was found in ywoa up to 2024.07.03. It has been rated as critical. This issue affects the function selectList of the file com/cloudweb/oa/mapper/xml/AddressDao.xml. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...

ywoa SQL注入漏洞

ywoa is an OA collaborative office system by bestfeng individual developer in China. A security vulnerability exists in ywoa version 2024.07.03 and earlier versions, which originates from a SQL injection vulnerability in the selectList function of com/cloudweb/oa/mapper/xml/AddressDao.xml...

Malicious code in air-dao (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddeda2a634c3018d1090755cab35377cb55a4f708bc18d0ac70f0999be80361c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-157 Malicious code in air-dao (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddeda2a634c3018d1090755cab35377cb55a4f708bc18d0ac70f0999be80361c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-0409

A vulnerability classified as critical has been found in liujianview gymxmjpa 1.0. This affects the function MembertypeDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/MembertypeController.java. The manipulation of the argument typeName leads to sql injection. It is possible to...

CVE-2025-0406

A vulnerability was found in liujianview gymxmjpa 1.0. It has been classified as critical. Affected is the function SubjectDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/SubjectController.java. The manipulation of the argument subname leads to sql injection. It is possible to...

CVE-2025-0408

A vulnerability was found in liujianview gymxmjpa 1.0. It has been rated as critical. Affected by this issue is the function LoosDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/LoosController.java. The manipulation of the argument loosName leads to sql injection. The attack may ...

CVE-2025-0405

A vulnerability was found in liujianview gymxmjpa 1.0 and classified as critical. This issue affects the function GoodsDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/GoodsController.java. The manipulation of the argument goodsName leads to sql injection. The attack may be...

gymxmjpa 安全漏洞

gymxmjpa is a gym management system for liujianview individual developers. A security vulnerability exists in gymxmjpa version 1.0, which originates from an SQL injection vulnerability in the loosName parameter of the LoosDaoImpl function in the...

CVE-2024-12480

A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2. It has been classified as critical. Affected is the function searchTopic of the file wetech-cms-master\wetech-core\src\main\java\tech\wetech\cms\dao\TopicDao.java. The manipulation of the argument con leads to sql injection. It is possible...

PT-2024-17612 · Unknown · Wetech-Cms

Name of the Vulnerable Software and Affected Versions: cjbi wetech-cms versions 1.0 through 1.2 Description: A critical issue affects the searchTopicByKeyword function of the file wetech-cms-masterwetech-coresrcmainjavatechwetechcmsdaoTopicDao.java. The manipulation of the keyword argument leads ...

PT-2024-17613 · Unknown · Wetech-Cms

Name of the Vulnerable Software and Affected Versions: cjbi wetech-cms versions 1.0 through 1.2 Description: A critical issue has been found, affecting the searchTopic function in the TopicDao.java file. The manipulation of the con argument leads to SQL injection, allowing for remote attacks. The...

Malicious code in inclusive-ai-dao-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1256786c01aeb97c5bae935d007b7939062250f307c5369a6a6597e12857995c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9006 Malicious code in inclusive-ai-dao-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1256786c01aeb97c5bae935d007b7939062250f307c5369a6a6597e12857995c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Kelp DAO Secures $9 Million in Private Sale for Restaking Innovations

By Owais Sultan Kelp DAO, a liquid restaking platform, today announced the closure of a $9 million private sale round, a… This is a post from HackRead.com Read the original post: Kelp DAO Secures $9 Million in Private Sale for Restaking Innovations...

PT-2024-14013 · Unknown · Contiki-Ng

Name of the Vulnerable Software and Affected Versions: Contiki-NG versions prior to 4.9 Description: The issue is caused by insufficient control of the lengths for DIO and DAO messages, particularly when they contain RPL sub-option headers, allowing an attacker to trigger out-of-bounds reads in t...

Jianghua Yaozu Autonomous County fordao network technology studio fordos document arbitrary file reading vulnerability

Forth Document is an open source online document system. Jianghua Yao Autonomous County for the road network technology studio for Si document arbitrary file reading vulnerability, an attacker can use the vulnerability to obtain sensitive information...