fang

このリポジトリには README がありません。...

CVE-2024-34310

CVE-2024-34310 CVE-2024-34310 제안된 설명 Jin Fang Times 콘텐츠 관리 시스템 v3.2.3에서 id 파라미터를 통해 SQL 삽입 취약점이 존재하는 것으로 발견되었습니다. 취약점 유형 SQL 삽입 제품 공급업체 https://www.bjjfsd.com/ 영향을 받는 제품 코드 베이스 Jin Fang Times 콘텐츠 관리 시스템 - 3.2.3 영향을 받는 구성 요소 public function datashow$id = 0 root@kitploit: if empty$id...

CVE-2026-3743

A flaw has been found in YiFang CMS 2.0.5. This affects the function update of the file app/db/admin/DsinglePageGroup.php. Executing a manipulation of the argument Name can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used...

CVE-2026-3743

A flaw has been found in YiFang CMS 2.0.5. This affects the function update of the file app/db/admin/DsinglePageGroup.php. Executing a manipulation of the argument Name can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used...

CVE-2026-3742 YiFang CMS D_singlePage.php update cross site scripting

A vulnerability was detected in YiFang CMS 2.0.5. The impacted element is the function update of the file app/db/admin/DsinglePage.php. Performing a manipulation of the argument Title results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and ma...

CVE-2026-2934

YiFang CMS (up to 2.0.5) is affected in the Extended Management Module by a vulnerability in the update function of file app/db/admin/D_friendLinkGroup.php. The issue arises from manipulation of the Name parameter, enabling cross site scripting (XSS). Attacks can be initiated remotely, and public...

CVE-2026-2932 YiFang CMS Extended Management D_adPosition.php update cross site scripting

A security flaw has been discovered in YiFang CMS up to 2.0.5. The impacted element is the function update of the file app/db/admin/DadPosition.php of the component Extended Management Module. Performing a manipulation of the argument name/index results in cross site scripting. The attack is...

CVE-2024-34310

Jin Fang Times Content Management System v3.2.3 was discovered to contain a SQL injection vulnerability via the id parameter...

EUVD-2024-34720

Malicious code in bioql PyPI...

CVE-2024-34310

Jin Fang Times Content Management System v3.2.3 was discovered to contain a SQL injection vulnerability via the id parameter...

Jin Fang Times Content Management System 安全漏洞

Jin Fang Times Content Management System is a content management system from Jin Fang Times. A security vulnerability exists in Jin Fang Times Content Management System version v3.2.3, which originates from a SQL injection vulnerability via the id parameter...

CVE-2024-34310

Jin Fang Times Content Management System v3.2.3 was discovered to contain a SQL injection vulnerability via the id parameter...

CVE-2024-34310

Jin Fang Times Content Management System v3.2.3 was discovered to contain a SQL injection vulnerability via the id parameter...

CVE-2024-34310

CVE-2024-34310 affects Jin Fang Times Content Management System v3.2.3. The connected documents confirm a SQL injection vulnerability exploitable via the id parameter . The root cause is an injection flaw in how the id value is processed, leading to potential unauthorized database access or data ...

PT-2024-25783 · Unknown · Jin Fang Times Content Management System

Name of the Vulnerable Software and Affected Versions: Jin Fang Times Content Management System version 3.2.3 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter. Recommendations: For Jin Fang Times Content Management System...

Vyper sha3 codegen bug

Summary There is an error in the stack management when compiling the IR for sha364. Concretely, the height variable is miscalculated. The vulnerability can't be triggered without writing the IR by hand. That is, it cannot be triggered from regular vyper code, it can only be triggered by using the...

GHSA-6845-XW22-FFXV Vyper sha3 codegen bug

Summary There is an error in the stack management when compiling the IR for sha364. Concretely, the height variable is miscalculated. The vulnerability can't be triggered without writing the IR by hand. That is, it cannot be triggered from regular vyper code, it can only be triggered by using the...

USN-5064-1: GNU cpio vulnerability

Maverick Chung and Qiaoyi Fang discovered that cpio incorrectly handled certain pattern files. A remote attacker could use this issue to cause cpio to crash, resulting in a denial of service, or possibly execute arbitrary code...

CVE-2021-30172

CVE-2021-30172 affects the Jun-He/Quan-Fang-Wei-Tong-Xun system: special characters on the image preview page input are not filtered, enabling a remote authenticated attacker to inject JavaScript via reflected XSS and access/manipulate customer information. Connected sources confirm the XSS vecto...

CVE-2021-30172 Jun-He Technology Ltd. Quan-Fang-Wei-Tong-Xun system - Reflected XSS

Special characters of picture preview page in the Quan-Fang-Wei-Tong-Xun system are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out Reflected XSS Cross-site scripting attacks, additionally access and manipulate customer’s...