Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via flaws one time token generation on the add administrator page...

CVE-2022-45491

CVE-2022-45491 affects sheredom json.h. The vulnerability is a buffer overflow in the json_parse_value function, with the flaw present before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (Nov 14, 2022). Impacted: the library’s parsing path can allow an attacker to execute arbitrary code and esc...

CVE-2021-37304

An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive information via the httptrace interface...

CVE-2021-37306

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: api uri:/sys/user/checkOnlyUser?username=admin...

CVE-2022-45492

Buffer overflow vulnerability in function jsonparsenumber in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 November 14, 2022 allows attackers to code arbitrary code and gain escalated privileges...

CVE-2021-37304

An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive information via the httptrace interface...

CVE-2022-45493

The CVE-2022-45493 issue affects sheredom json.h, specifically the json_parse_key function. The root cause is a buffer overflow in json_parse_key prior to commit 0825301a07cbf51653882bf2b153cc81fdadf41 (Nov 14, 2022). Impact reported: attackers may execute arbitrary code and gain escalated privil...

CVE-2022-45493

Buffer overflow vulnerability in function jsonparsekey in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 November 14, 2022 allows attackers to code arbitrary code and gain escalated privileges...

CVE-2021-37306

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: api uri:/sys/user/checkOnlyUser?username=admin...

CVE-2021-36444

Cross Site Request Forgery CSRF vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via flaws one time token generation on the add administrator page...

CVE-2021-36444

CVE-2021-36444 affects imcat 5.4, with a CSRF flaw on the add administrator page due to a flawed one-time token generation. This can allow remote attackers to escalate privileges. The advisory notes a PoC exists; no in-the-wild exploit status is confirmed in the provided records. APT-style remedi...

CVE-2021-37305

CVE-2021-37305 affects jeecg-boot up to version 2.4.5. The issue is an insecure permissions flaw in the API endpoint /sys/user/querySysUser?username=admin, allowing remote attackers to gain escalated privileges and view sensitive information (e.g., email, phone, usernames). Reports from multiple ...

CVE-2021-37304

CVE-2021-37304 : Insecure permissions in jeecg-boot 2.4.5 allow unauthenticated remote attackers to gain escalated privileges and view sensitive information via the httptrace interface. The root cause is insufficient permission checks, enabling information disclosure and privilege escalation. The...

CVE-2022-45494

Buffer overflow vulnerability in function jsonparseobject in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 November 14, 2022 allows attackers to code arbitrary code and gain escalated privileges...

Buffer overflow

Buffer overflow vulnerability in function jsonparseobject in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 November 14, 2022 allows attackers to code arbitrary code and gain escalated privileges...

CVE-2022-45494

Buffer overflow vulnerability in function jsonparseobject in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 November 14, 2022 allows attackers to code arbitrary code and gain escalated privileges...

CVE-2022-40035

File Upload Vulnerability found in Rawchen Blog-ssm v1.0 allowing attackers to execute arbitrary commands and gain escalated privileges via the /uploadFileList component...

Unrestricted file upload

File Upload Vulnerability found in Rawchen Blog-ssm v1.0 allowing attackers to execute arbitrary commands and gain escalated privileges via the /uploadFileList component...

CVE-2022-40035

File Upload Vulnerability found in Rawchen Blog-ssm v1.0 allowing attackers to execute arbitrary commands and gain escalated privileges via the /uploadFileList component...

CVE-2021-39428

Cross Site Scripting XSS vulnerability in Users.php in eyoucms 1.5.4 allows remote attackers to run arbitrary code and gain escalated privilege via the filename for editusersheadpic...