CVE-2025-13168

A weakness has been identified in ury-erp ury up to 0.2.0. This affects the function overridedpastorderlist of the file ury/ury/api/posextend.py. This manipulation of the argument searchterm causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available t...

NUS-M9 安全漏洞

NUS-M9 is an ERP system from China Zhelin NUS Company. A security vulnerability exists in NUS-M9 v3.0.0, which originates from the presence of an arbitrary file download in the component /Basics/DownloadInpFile, which allows an attacker to request the download of an arbitrary file and gain access...