CVE-2025-66410 Gin-vue-admin has an arbitrary file deletion vulnerability

Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control the 'FileMd5' parameter to delete any file and folder...

CVE-2025-66410

CVE-2025-66410 affects gin-vue-admin (backend in github.com/flipped-aurora/gin-vue-admin) up to version 2.8.6. The vulnerability allows an attacker to delete arbitrary files/folders on the server by supplying a crafted FileMd5 value to the removeChunk endpoint (POST /api/fileUploadAndDownload/rem...

Gin-Vue-Admin 路径遍历漏洞

Gin-Vue-Admin is flipped-aurora open source a full-stack predevelopment infrastructure platform based on Vue and Gin development. A path traversal vulnerability exists in Gin-Vue-Admin version 2.8.6 and earlier, which stems from an attacker being able to control the FileMd5 parameter to delete...

EUVD-2025-140343

Malicious code in mahiy-sutabu-gin npm...

EUVD-2021-1332

Malware in sbrugna...

EUVD-2023-36163

Malicious code in bioql PyPI...

EUVD-2022-53400

Malicious code in bioql PyPI...

EUVD-2022-7047

Malicious code in bioql PyPI...

EUVD-2023-0818

Malicious code in bioql PyPI...

EUVD-2022-7542

Malicious code in bioql PyPI...

EUVD-2022-29627

Malicious code in bioql PyPI...

EUVD-2022-26877

Malicious code in bioql PyPI...

EUVD-2022-41795

Malicious code in bioql PyPI...

EUVD-2024-1974

Malicious code in bioql PyPI...

EUVD-2024-36875

Malicious code in bioql PyPI...

gin

It is an offensive tool for web frameworks. The primary target is Gin, a HTTP web framework written in Go Golang, which features a Martini-like API with much better performance. The vulnerability class/vector is not specified, but the code and metadata suggest that it may be related to a remote...

DLA-4285-1 golang-github-gin-contrib-cors - security update

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2019-25211

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - parseWildcardRules in Gin-Gonic CORS middleware before 1.6.0 mishandles a wildcard at the end of an origin string, e.g., https://example.community/ is allowed...

Linux Distros Unpatched Vulnerability : CVE-2023-26125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Versions of the package github.com/gin-gonic/gin before 1.9.0 are vulnerable to Improper Input Validation by allowing an attacker to use a specially crafted...

Linux Distros Unpatched Vulnerability : CVE-2020-36567

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines. CVE-2020-36567 Note tha...