Lucene search
+L

39 matches found

EUVD
EUVD
•added 2026/02/27 6:31 a.m.•25 views

EUVD-2026-8993

A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java of the component Image Save Endpoint. Such manipulation of the...

6.5CVSS6.4AI score0.00348EPSS
SaveExploits1References5
NVD
NVD
•added 2026/02/27 4:16 a.m.•31 views

CVE-2026-3286

A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java of the component Image Save Endpoint. Such manipulation of the...

6.5CVSS0.00348EPSS
SaveExploits1References4
Mend
Mend
•added 2026/02/27 3:32 a.m.•10 views

CVE-2026-3286

A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java of the component Image Save Endpoint. Such manipulation of the...

6.5CVSS6.4AI score0.00348EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2026/02/27 3:32 a.m.•18 views

CVE-2026-3286

A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java of the component Image Save Endpoint. Such manipulation of the...

6.5CVSS6.4AI score0.00348EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/27 12:00 a.m.•13 views

CVE-2026-3286: Server-Side Request Forgery (SSRF)

A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java of the component Image Save Endpoint. Such manipulation of the...

6.5CVSS6.4AI score0.00348EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2025-12451

Malicious code in bioql PyPI...

5.4CVSS5.1AI score0.00366EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2025-12450

Malicious code in bioql PyPI...

5.5CVSS5.9AI score0.00495EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2025/05/20 11:19 p.m.•42 views

CVE-2025-4839

A vulnerability has been found in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /paicoding-core/src/main/java/com/github/paicoding/forum/core/util/CrossUtil.java. The manipulation leads to permissiv...

8.1CVSS4.4AI score0.00306EPSS
SaveExploits1
Mend
Mend
•added 2025/05/17 10:00 p.m.•12 views

CVE-2025-4839

A vulnerability has been found in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /paicoding-core/src/main/java/com/github/paicoding/forum/core/util/CrossUtil.java. The manipulation leads to permissiv...

8.1CVSS4.4AI score0.00306EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/05/17 10:00 p.m.•16 views

CVE-2025-4839 itwanger paicoding CrossUtil.java cross-domain policy

A vulnerability has been found in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /paicoding-core/src/main/java/com/github/paicoding/forum/core/util/CrossUtil.java. The manipulation leads to permissiv...

3.1CVSS4.4AI score0.00306EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2025/05/17 10:00 p.m.•19 views

CVE-2025-4839 itwanger paicoding CrossUtil.java cross-domain policy

A vulnerability has been found in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /paicoding-core/src/main/java/com/github/paicoding/forum/core/util/CrossUtil.java. The manipulation leads to permissiv...

2.3CVSS4.4AI score0.00306EPSS
SaveExploits1References6
CVE
CVE
•added 2025/05/17 10:00 p.m.•74 views

CVE-2025-4839

CVE-2025-4839 affects itwanger paicoding versions 1.0.0–1.0.3. Affects CrossUtil.java in the paicoding-core path, enabling a permissive cross-domain policy with untrusted domains. Vectors: remote exploitation with rather high complexity; exploitation described as difficult but publicly disclosed....

8.1CVSS4.4AI score0.00306EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2025/05/17 10:00 p.m.•68 views

CVE-2025-4839 itwanger paicoding CrossUtil.java cross-domain policy

A vulnerability has been found in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /paicoding-core/src/main/java/com/github/paicoding/forum/core/util/CrossUtil.java. The manipulation leads to permissiv...

3.1CVSS0.00306EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/05/17 12:00 a.m.•29 views

PT-2025-21813 · Unknown · Itwanger Paicoding

Name of the Vulnerable Software and Affected Versions: itwanger paicoding versions 1.0.0 through 1.0.3 Description: A vulnerability has been found in the software, classified as problematic. It affects an unknown functionality of the file...

8.1CVSS4.7AI score0.00306EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/17 12:00 a.m.•12 views

CVE-2025-4839: Permissive Cross-domain Policy with Untrusted Domains

A vulnerability has been found in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /paicoding-core/src/main/java/com/github/paicoding/forum/core/util/CrossUtil.java. The manipulation leads to permissiv...

8.1CVSS4.4AI score0.00306EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/04/29 11:10 a.m.•39 views

CVE-2025-3966

A vulnerability was found in itwanger paicoding 1.0.3 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/home?userId=1=read of the component Browsing History Handler. The manipulation leads to information disclosure. The attack may be launched...

5.3CVSS4.8AI score0.00519EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/04/29 11:10 a.m.•45 views

CVE-2025-3967

A vulnerability was found in itwanger paicoding 1.0.3. It has been classified as critical. This affects an unknown part of the file /article/api/post of the component Article Handler. The manipulation of the argument articleId leads to improper authorization. It is possible to initiate the attack...

5.5CVSS5.4AI score0.00495EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/04/29 9:59 a.m.•39 views

CVE-2025-3965

A vulnerability has been found in itwanger paicoding 1.0.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /article/app/post. The manipulation of the argument content leads to cross site scripting. The attack can be launched remotely. The...

5.4CVSS3.4AI score0.00366EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/27 11:15 a.m.•35 views

CVE-2025-3967

A vulnerability was found in itwanger paicoding 1.0.3. It has been classified as critical. This affects an unknown part of the file /article/api/post of the component Article Handler. The manipulation of the argument articleId leads to improper authorization. It is possible to initiate the attack...

5.5CVSS0.00495EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/04/27 10:31 a.m.•15 views

CVE-2025-3967 itwanger paicoding Article post improper authorization

A vulnerability was found in itwanger paicoding 1.0.3. It has been classified as critical. This affects an unknown part of the file /article/api/post of the component Article Handler. The manipulation of the argument articleId leads to improper authorization. It is possible to initiate the attack...

5.5CVSS5.4AI score0.00495EPSS
SaveExploits1References5
Rows per page
Query Builder