9289 matches found
Exploit for CVE-2025-29927
CVE-2025-29927 - Critical Security Vulnerability in Next.js...
VulnCheck KEV: CVE-2013-3827
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0...
VulnCheck KEV: CVE-2012-3153
Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet. NOTE: the previous information is from the October 2012 CPU...
CVE-2025-5493
A vulnerability was found in Baison Channel Middleware Product 2.0.1 and classified as critical. Affected by this issue is some unknown functionality of the file /e3api/api/main/ToJsonByControlName. The manipulation of the argument data leads to sql injection. The attack may be launched remotely...
CVE-2025-5493
A vulnerability was found in Baison Channel Middleware Product 2.0.1 and classified as critical. Affected by this issue is some unknown functionality of the file /e3api/api/main/ToJsonByControlName. The manipulation of the argument data leads to sql injection. The attack may be launched remotely...
CVE-2025-5493
A vulnerability was found in Baison Channel Middleware Product 2.0.1 and classified as critical. Affected by this issue is some unknown functionality of the file /e3api/api/main/ToJsonByControlName. The manipulation of the argument data leads to sql injection. The attack may be launched remotely...
CVE-2025-5493 Baison Channel Middleware Product ToJsonByControlName sql injection
A vulnerability was found in Baison Channel Middleware Product 2.0.1 and classified as critical. Affected by this issue is some unknown functionality of the file /e3api/api/main/ToJsonByControlName. The manipulation of the argument data leads to sql injection. The attack may be launched remotely...
CVE-2025-5493
CVE-2025-5493 affects Baison Channel Middleware Product 2.0.1. Vulnerability exists in the API endpoint /e3api/api/main/ToJsonByControlName where the data argument is improperly handled, leading to SQL injection. The issue can be exploited remotely and has been disclosed publicly. Connected docum...
Baison Channel Middleware Product 安全漏洞
Baison Channel Middleware Product is a software for multi-channel business integration for retail enterprises from Baison China. A security vulnerability exists in Baison Channel Middleware Product version 2.0.1, which originates from an incorrect manipulation of the parameter data resulting in S...
PT-2025-23601 · Baison · Baison Channel Middleware Product
Name of the Vulnerable Software and Affected Versions: Baison Channel Middleware Product version 2.0.1 Description: A critical issue was found in the Baison Channel Middleware Product, affecting an unknown functionality of the file "/e3api/api/main/ToJsonByControlName". The manipulation of the da...
CVE-2025-5410 Mist Community Edition middleware.py session_start_response cross-site request forgery
A vulnerability was found in Mist Community Edition up to 4.7.1. It has been declared as problematic. This vulnerability affects the function sessionstartresponse of the file src/mist/api/auth/middleware.py. The manipulation leads to cross-site request forgery. The attack can be initiated remotel...
Mist 安全漏洞
Mist is an open source multi-cloud management platform from Mist, Inc. in the United States. A security vulnerability exists in Mist 4.7.1 and earlier versions, which originates from a cross-site request forgery in the function sessionstartresponse in the file src/mist/api/auth/middleware.py...
SUSE CVE-2025-47952
Traefik pronounced traffic is an HTTP reverse proxy and load balancer. Prior to versions 2.11.25 and 3.4.1, there is a potential vulnerability in Traefik managing the requests using a PathPrefix, Path or PathRegex matcher. When Traefik is configured to route the requests to a backend using a...
Open Redirect
Overview Affected versions of this package are vulnerable to Open Redirect via the manipulation of the Forwarded or X-Forwarded-Host header in incoming requests. An attacker can capture the secret reset code and gain unauthorized access to the user's account by causing the system to generate a...
CVE-2025-47952
Traefik pronounced traffic is an HTTP reverse proxy and load balancer. Prior to versions 2.11.25 and 3.4.1, there is a potential vulnerability in Traefik managing the requests using a PathPrefix, Path or PathRegex matcher. When Traefik is configured to route the requests to a backend using a...
Traefik 路径遍历漏洞
Traefik is an open source reverse proxy and load balancing tool from Traefik Open Source. A path traversal vulnerability exists in Traefik versions prior to 3.4.1, which stems from mishandling of the path matcher and could lead to bypassing the middleware chain...
MINI-MWVG-5FX6-7FR9
Bulletin has no description...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal when using the PathPrefix, Path, or PathRegex route matchers. An attacker can target a backend exposed using another router, by-passing the middleware chain by crafting a request with a manipulated path using...
Traefik allows path traversal using url encoding
Impact There is a potential vulnerability in Traefik managing the requests using a PathPrefix, Path or PathRegex matcher. When Traefik is configured to route the requests to a backend using a matcher based on the path, if the URL contains a URL encoded string in its path, it’s possible to target ...
GHSA-VRCH-868G-9JX5 Traefik allows path traversal using url encoding
Impact There is a potential vulnerability in Traefik managing the requests using a PathPrefix, Path or PathRegex matcher. When Traefik is configured to route the requests to a backend using a matcher based on the path, if the URL contains a URL encoded string in its path, it’s possible to target ...