Lucene search
+L

859 matches found

Github Security Blog
Github Security Blog
added 2025/10/30 3:32 p.m.15 views

Byaidu PDFMathTranslate vulnerable to open redirect

An open redirect vulnerability exists in Byaidu PDFMathTranslate v1.9.9 that allows attackers to craft URLs that cause the application to redirect users to arbitrary external websites via the file parameter to the /gradioapi endpoint. This vulnerability could be exploited for phishing attacks or ...

6.1CVSS6.9AI score0.00211EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
added 2025/10/30 3:32 p.m.10 views

EUVD-2025-37013

Byaidu PDFMathTranslate vulnerable to open redirect...

6.4AI score0.00211EPSS
SaveExploits0References5
OSV
OSV
added 2025/10/30 3:32 p.m.8 views

GHSA-PFRV-63W8-Q7RQ Byaidu PDFMathTranslate vulnerable to open redirect

An open redirect vulnerability exists in Byaidu PDFMathTranslate v1.9.9 that allows attackers to craft URLs that cause the application to redirect users to arbitrary external websites via the file parameter to the /gradioapi endpoint. This vulnerability could be exploited for phishing attacks or ...

5.1CVSS6.9AI score0.00211EPSS
SaveExploits0References5
NVD
NVD
added 2025/10/30 2:15 p.m.12 views

CVE-2025-50736

An open redirect vulnerability exists in Byaidu PDFMathTranslate v1.9.9 that allows attackers to craft URLs that cause the application to redirect users to arbitrary external websites via the file parameter to the /gradioapi endpoint. This vulnerability could be exploited for phishing attacks or ...

6.1CVSS0.00211EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/30 12:0 a.m.14 views

PDFMathTranslate 安全漏洞

PDFMathTranslate is a PDF translation software by Byaidu Personal Developer. A security vulnerability exists in PDFMathTranslate version 1.9.9, which stems from improper handling of the file parameter and could lead to a redirection attack...

6.1CVSS6.4AI score0.00211EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/10/30 12:0 a.m.7 views

CVE-2025-50736

An open redirect vulnerability exists in Byaidu PDFMathTranslate v1.9.9 that allows attackers to craft URLs that cause the application to redirect users to arbitrary external websites via the file parameter to the /gradioapi endpoint. This vulnerability could be exploited for phishing attacks or ...

6.4AI score0.00211EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/30 12:0 a.m.21 views

CVE-2025-50736

CVE-2025-50736 : Open redirect in Byaidu PDFMathTranslate v1.9.9 allows crafted URLs to redirect to arbitrary external sites via the file parameter to the /gradio_api endpoint. Impact noted includes phishing and security-filter bypass; exploitation details are not provided in the documents. Sever...

6.1CVSS6.5AI score0.00211EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/30 12:0 a.m.15 views

PT-2025-44409

Name of the Vulnerable Software and Affected Versions Byaidu PDFMathTranslate version 1.9.9 Description An open redirect issue exists that allows attackers to create URLs which redirect users to external websites. This is possible through manipulating the file parameter within the /gradio api API...

6.1CVSS5.9AI score0.00211EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2025/10/17 12:0 a.m.10 views

Streamax Crocus 代码问题漏洞

Streamax Crocus is a system used by China Ruiming Streamax to reduce commercial vehicles to reduce traffic accidents and cargo loss. A code issue vulnerability exists in Streamax Crocus version 1.3.40, which stems from an incorrect manipulation of the parameter File in File/FileDir.do and could...

8.8CVSS6.7AI score0.00465EPSS
SaveExploits1References5
OSV
OSV
added 2025/10/13 4:15 a.m.11 views

CVE-2025-11659

A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected by this vulnerability is an unknown functionality of the file /assets/uploadNotes.php. This manipulation of the argument File causes unrestricted upload. Remote...

9.8CVSS5.5AI score0.00547EPSS
SaveExploits1References4
CVE
CVE
added 2025/10/13 3:32 a.m.41 views

CVE-2025-11659

ProjectsAndPrograms School Management System is affected by CVE-2025-11659 due to a flaw in the /assets/uploadNotes.php File parameter, enabling unrestricted file upload. Reports indicate remote exploitation is possible and an exploit has been published. The issue stems from insufficient validati...

9.8CVSS7.1AI score0.00547EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2025/10/13 3:32 a.m.28 views

CVE-2025-11659 ProjectsAndPrograms School Management System uploadNotes.php unrestricted upload

A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected by this vulnerability is an unknown functionality of the file /assets/uploadNotes.php. This manipulation of the argument File causes unrestricted upload. Remote...

7.5CVSS0.00547EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/10/13 12:0 a.m.10 views

school-management-system 代码问题漏洞

school-management-system is a school management system developed in PHP for schools or small organizations by Shubham kumar individual developer. A code issue vulnerability exists in school-management-system, which stems from the incorrect manipulation of the parameter File in the file...

9.8CVSS7.6AI score0.00547EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/10/13 12:0 a.m.10 views

school-management-system 代码问题漏洞

school-management-system is a school management system developed in PHP for schools or small organizations by Shubham kumar individual developer. A code issue vulnerability exists in school-management-system, which stems from incorrect manipulation of the parameter File in the file...

9.8CVSS7.6AI score0.00547EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/10/13 12:0 a.m.7 views

Get Projects School Management System 代码问题漏洞

Get Projects School Management System is a Get Projects open source school management system software. A code issue vulnerability exists in Get Projects School Management System, which stems from a misbehavior of the parameter File in the file /assets/uploadSllyabus.php, which could lead to...

9.8CVSS7.5AI score0.00424EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/10/13 12:0 a.m.8 views

school-management-system 代码问题漏洞

school-management-system is a school management system developed in PHP for schools or small organizations by Shubham kumar individual developer. A code issue vulnerability exists in school-management-system, which stems from the incorrect manipulation of the parameter File in the file...

9.8CVSS7.6AI score0.00424EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/10/11 12:0 a.m.8 views

MoneyPrinterTurbo 路径遍历漏洞

MoneyPrinterTurbo is a software by Harry's personal developer that generates short HD videos using AI macromodels. A path traversal vulnerability exists in MoneyPrinterTurbo 1.2.6 and earlier versions, which stems from misuse of the API endpoint component parameter File in the file...

8.8CVSS6.4AI score0.00415EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2018-8073

Malware in sbrugna...

8CVSS8AI score0.01499EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2012-2267

Malware in sbrugna...

4.3CVSS6.1AI score0.03262EPSS
SaveExploits2References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2013-0168

Malware in sbrugna...

4.3CVSS6.4AI score0.01682EPSS
SaveExploits2References2
Rows per page
Query Builder