EUVD-2026-96561

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController delete handler that allows any authenticated user to delete audit log entries. Low-privileged attackers can obtain log ids from the unguarded /sys/log/list endpoint and delete chosen syslog records to...

EUVD-2026-96562

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController deleteBatch handler that allows any authenticated user to delete system audit log entries. Low-privileged attackers can send a DELETE request with ids set to allclear to wipe the entire syslog table,...

EUVD-2026-96556

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create message templates by calling POST /sys/message/sysMessageTemplate/add. Attackers holding only minimal roles can insert arbitrary notification templates with chosen codes...

EUVD-2026-96552

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController release handler that allows any authenticated user to publish or unpublish other users' AI applications. Low-privileged attackers can send POST requests to /airag/app/release to obtain share tokens...

EUVD-2026-96555

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController deleteBatch handler that allows any authenticated user to delete AI evaluator records. Low-privileged attackers can send comma-separated ids to DELETE /airag/extData/deleteBatch, which lacks owner...

EUVD-2026-96557

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify message templates via PUT /sys/message/sysMessageTemplate/edit. Attackers can obtain template ids from the unguarded list endpoint and overwrite system notification titl...

EUVD-2026-96549

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController edit handler that allows any authenticated user to modify word templates. Low-privileged attackers can send PUT or POST requests to /airag/word/edit to overwrite shared templates that other...

EUVD-2026-96550

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delete handler that allows any authenticated user to delete word templates. Low-privileged attackers can send DELETE requests to /airag/word/delete with an id parameter to permanently remove a...

EUVD-2026-96551

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController deleteBatch handler that allows low-privileged authenticated users to delete word templates. Attackers can send a DELETE request to /airag/word/deleteBatch with comma-separated ids to...

EUVD-2026-96545

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController deleteById handler that allows any authenticated user to delete OCR records. Low-privileged attackers can obtain record ids from the unguarded GET /airag/ocr/list endpoint and repeatedly delete every...

EUVD-2026-96544

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController updateById handler that allows any authenticated user to modify global OCR templates. Low-privileged attackers can send PUT requests to /airag/ocr/edit to overwrite LLM prompts in the shared airag:ocr...

CVE-2025-26417

इस रिपॉजिटरी में README नहीं है।...

papercut-toolkit

PaperCut CVE-2026-81578 + CVE-2026-82078 रक्षा टूलकिट एक रक्षात्मक टूलकिट जो PaperCut में श्रृंखलाबद्ध प्री-ऑथ रिमोट कोड निष्पादन कमजोरियों के संपर्क की जाँच और समझ के लिए है: CVE-2026-81578 — महत्वपूर्ण फ़ंक्शन के लिए अनुपलब्ध प्रमाणीकरण CWE-306। एक दूरस्थ अनप्रमाणित अनुरोध एक्सेस सत्यापन पूर्ण...

CVE-2024-11643

CVE-2024-11643 Accessibility by AllAccessible input type="hidden" name="optname" value="defaultrole...

MDC

इस रिपॉजिटरी में README नहीं है।...

CVE-2026-55994

camel-iggy यूज़र-हेडर इंजेक्शन रिप्रोड्यूसर CVE-2026-55994 यह प्रोजेक्ट Apache Camel के camel-iggy घटक में message-header injection को प्रदर्शित करता है, जिसे CVE-2026-55994 के रूप में ट्रैक किया गया है। Iggy उपभोक्ता किसी आने वाले संदेश के user-headers को बिना किसीHeaderFilterStrategy के Camel...

cve-2023-3519

इस रिपॉजिटरी में README नहीं है।...

CVE-2024-4875

CVE-2024-4875 HT Mega – Absolute Addons For Elementor = 2.5.2 - विकल्प अपडेट हेतु प्राधिकरण का अभाव विवरण: WordPress के लिए HT Mega – Absolute Addons For Elementor प्लगइन, संस्करण 2.5.2 तक 2.5.2 सहित, 'ajaxdismiss' फ़ंक्शन पर क्षमता जाँच capability check की कमी के कारण डेटा के अनधिकृत संशोधन|डेटा...

CVE-2023-6700

CVE-2023-6700 Cookie Information | Solução Gratuita de Consentimento GDPR = 2.0.22 - Atualização Arbitrária de Opções Autenticada Subscriber+ Descrição: CVE-2023-6700 O plugin Cookie Information | Free GDPR Consent Solution para WordPress é vulnerável a atualizações arbitrárias de opções devido a...

CVE-2024-30485

CVE-2024-30485 शोषण 📌 अवलोकन CVE-2024-30485 WordPress के Finale Lite प्लगइन संस्करण = 2.18.0 में पाई गई एक उच्च-गंभीरता वाली भेद्यता है। यह भेद्यता प्रमाणित उपयोगकर्ताओं सब्सक्राइबर+ को उचित प्राधिकरण के बिना मनमाने प्लगइन्स को स्थापित और सक्रिय करने की अनुमति देती है। गंभीरता : उच्च CVSS 8.8...