CVE-2024-43051 Improper Authorization in SPS-HLOS

Information disclosure while deriving keys for a session for any Widevine use case...

CVE-2025-1847

A vulnerability was found in zj1983 zz up to 2024-8. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was...

CVE-2025-1847

A vulnerability was found in zj1983 zz up to 2024-8. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was...

CVE-2025-1847 zj1983 zz improper authorization

A vulnerability was found in zj1983 zz up to 2024-8. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was...

CVE-2025-1847 zj1983 zz improper authorization

A vulnerability was found in zj1983 zz up to 2024-8. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was...

CVE-2025-1847

CVE-2025-1847 affects zj1983 zz up to 2024-8. The vulnerability is described as an improper authorization flaw that can be triggered remotely, with an exploit disclosed publicly. Multiple sources (NVD, Red Hat, CVE registries, etc.) consistently report a critical severity with potential high impa...

PT-2025-9257 · Zj1983 · Zj1983

Name of the Vulnerable Software and Affected Versions: zj1983 zz up to 2024-8 Description: A critical issue affects some unknown processing in zj1983 zz, leading to improper authorization. The manipulation can be initiated remotely. The exploit has been disclosed to the public and may be used. Th...

zz 安全漏洞

zz is an e-commerce platform for zj1983 individual developers. A security vulnerability exists in zz 2024-8 and prior versions that stems from improper authorization...

CVE-2025-1815

Affected software: pbrong hrms up to 1.0.1. The vulnerability occurs in HrmsDB (resource.go) due to manipulation of the user_cookie argument, causing improper authorization. This enables a remote attack, and the exploit has been disclosed publicly. No patch/version remediation details are provide...

CVE-2025-1815 pbrong hrms resource.go HrmsDB improper authorization

A vulnerability, which was classified as critical, was found in pbrong hrms up to 1.0.1. This affects the function HrmsDB of the file \resource\resource.go. The manipulation of the argument usercookie leads to improper authorization. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-1815 pbrong hrms resource.go HrmsDB improper authorization

A vulnerability, which was classified as critical, was found in pbrong hrms up to 1.0.1. This affects the function HrmsDB of the file \resource\resource.go. The manipulation of the argument usercookie leads to improper authorization. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-1806

A vulnerability, which was classified as problematic, has been found in Eastnets PaymentSafe 2.5.26.0. Affected by this issue is some unknown functionality of the file /Default.aspx of the component URL Handler. The manipulation leads to improper authorization. The attack may be launched remotely...

hrms 安全漏洞

hrms is a human resource management system from BoringError Individual Developers. A security vulnerability exists in hrms 1.0.1 and prior versions that stems from improper authorization and could lead to remote code execution...

Eastnets PaymentSafe 安全漏洞

Eastnets PaymentSafe is a fast gpi payment screening solution from Eastnets UAE that detects and prevents fraud in real time. A security vulnerability exists in Eastnets PaymentSafe version 2.5.26.0 that stems from improper authorization and could lead to remote code execution...

CVE-2025-1806

CVE-2025-1806 affects Eastnets PaymentSafe 2.5.26.0, specifically the /Default.aspx file in the URL Handler. The issue arises from improper authorization in an unknown function, with remote attack potential. Public exploit information is available, and multiple sources concur on the exposure. A f...

CVE-2025-1806 Eastnets PaymentSafe URL Default.aspx improper authorization

A vulnerability, which was classified as problematic, has been found in Eastnets PaymentSafe 2.5.26.0. Affected by this issue is some unknown functionality of the file /Default.aspx of the component URL Handler. The manipulation leads to improper authorization. The attack may be launched remotely...

CVE-2025-1806 Eastnets PaymentSafe URL Default.aspx improper authorization

A vulnerability, which was classified as problematic, has been found in Eastnets PaymentSafe 2.5.26.0. Affected by this issue is some unknown functionality of the file /Default.aspx of the component URL Handler. The manipulation leads to improper authorization. The attack may be launched remotely...

PT-2025-9187 · Eastnets · Eastnets Paymentsafe

Name of the Vulnerable Software and Affected Versions: Eastnets PaymentSafe version 2.5.26.0 Description: A problem has been found in Eastnets PaymentSafe, affecting some unknown functionality of the file /Default.aspx of the component URL Handler. The manipulation leads to improper authorization...

Security Bulletin:Vulnerability in Apache Druid affects watsonx.data

Summary Apache Druid could allow a remote attacker to bypass security restrictions. These could affect watsonx.data. Vulnerability Details CVEID:CVE-2024-45384 DESCRIPTION: Apache Druid could allow a remote attacker to bypass security restrictions, caused by a flaw in the druid-pac4j extension. B...

WSO2 API Manager和WSO2 Identity Server 安全漏洞

WSO2 API Manager and WSO2 Identity Server IS are both products of WSO2, Inc.WSO2 API Manager is an API lifecycle management solution.WSO2 Identity Server is an identity server. A security vulnerability exists in WSO2 API Manager and WSO2 Identity Server that stems from improper authorization...