CVE-2025-3850

CVE-2025-3850 affects YXJ2018 SpringBoot-Vue-OnlineExam 1.0. The issue is described as improper authentication within the component API processing, enabling remote exploitation with high attack complexity and reported public disclosure. Multiple connected sources reiterate the vulnerability again...

CVE-2025-3850

A vulnerability, which was classified as problematic, has been found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This issue affects some unknown processing of the component API. The manipulation leads to improper authentication. The attack may be initiated remotely. The complexity of an attack is...

CVE-2025-3850 YXJ2018 SpringBoot-Vue-OnlineExam API improper authentication

A vulnerability, which was classified as problematic, has been found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This issue affects some unknown processing of the component API. The manipulation leads to improper authentication. The attack may be initiated remotely. The complexity of an attack is...

SpringBoot-Vue-OnlineExam 授权问题漏洞

SpringBoot-Vue-OnlineExam is an online exam system by Yu Personal Developers. An authorization issue vulnerability exists in SpringBoot-Vue-OnlineExam version 1.0, which stems from improper authentication issues with certain processing of the component API...

PT-2025-17527 · Mojoomla · Wpams

Name of the Vulnerable Software and Affected Versions: WPAMS versions prior to 44.0 Description: The issue is related to an Incorrect Privilege Assignment vulnerability, which allows for Privilege Escalation. This vulnerability is associated with improper authentication in the WPAMS plugin on...

CVE-2025-3850: Improper Authentication

A vulnerability, which was classified as problematic, has been found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This issue affects some unknown processing of the component API. The manipulation leads to improper authentication. The attack may be initiated remotely. The complexity of an attack is...

PT-2025-17474 · Unknown · Yxj2018 Springboot-Vue-Onlineexam

Name of the Vulnerable Software and Affected Versions: YXJ2018 SpringBoot-Vue-OnlineExam version 1.0 Description: A vulnerability has been found in YXJ2018 SpringBoot-Vue-OnlineExam, affecting some unknown processing of the component API. The manipulation leads to improper authentication. The...

📄 WordPress 123pan Cloud Storage 1.0 File Deletion / Shell Upload / Injection

WordPress 123pan Cloud Storage plugin version 1.0 suffers from token handling, remote shell upload, file deletion, and HTTP header injection vulnerabilities. @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ .:. Exploit Title WordPress 123pan Cloud Storage Plugin - Multiple...

CVE-2025-27086: Improper Authentication

A vulnerability in the HPE Performance Cluster Manager HPCM GUI could allow an attacker to bypass authentication...

ASUS AiCloud Improper Authentication Control Vulnerability

AiCloud is a cloud service from ASUS, designed to provide easy access to the data inside the router's back-up devices such as USBs or PCs, as well as uploading, downloading, playing music online, browsing documents online, sharing links to Facebook, and setting up Smart Sync to synchronize with t...

OESA-2025-1435 cobbler security update

Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. Cobbler's advanced features include importing distributions from DVDs and rsync mirrors,...

CVE-2025-2492

An improper authentication control vulnerability exists in AiCloud. This vulnerability can be triggered by a crafted request, potentially leading to unauthorized execution of functions. Refer to the 'ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information...

CVE-2025-2492

CVE-2025-2492 affects ASUS AiCloud on supported routers and describes an improper authentication control that can be triggered by a crafted request, potentially allowing remote execution of functions with administrative privileges. Core details from connected sources indicate a high-severity (CVS...

CVE-2025-2492

An improper authentication control vulnerability exists in AiCloud. This vulnerability can be triggered by a crafted request, potentially leading to unauthorized execution of functions. Refer to the 'ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information...

ASUS AiCloud 安全漏洞

AiCloud is a cloud service from ASUS, designed to provide easy access to the data inside the router's back-up devices such as USBs or PCs, as well as uploading, downloading, playing music online, browsing documents online, sharing links to Facebook, and setting up Smart Sync to synchronize with t...

PT-2025-17288

Name of the Vulnerable Software and Affected Versions ASUS AiCloud affected versions not specified Description A critical authentication control issue exists in ASUS AiCloud, potentially allowing attackers to bypass authentication and execute unauthorized functions on affected devices remotely. T...

iManage Work Desktop for Mac 安全漏洞

iManage Work Desktop for Mac is an application from iManage, Inc. A security vulnerability exists in iManage Work Desktop for Mac versions 10.8.1.46 and earlier, which stems from improper authentication of the source of a communication channel and could result in the execution of arbitrary comman...

CVE-2025-31478: Improper Authentication

Zulip is an open-source team collaboration tool. Zulip supports a configuration where account creation is limited solely by being able to authenticate with a single-sign on authentication backend, meaning the organization places no restrictions on email address domains or invitations being requir...

CVE-2025-30733: Improper Authentication

Vulnerability in the RDBMS Listener component of Oracle Database Server. Supported versions that are affected are 19.3-19.26, 21.3-21.17 and 23.4-23.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS Listener. Successful...

CVE-2024-44843: Improper Authentication

An issue in the web socket handshake process of SteVe v3.7.1 allows attackers to bypass authentication and execute arbitrary coammands via supplying crafted OCPP requests...