ruoyi-vue-pro 路径遍历漏洞

ruoyi-vue-pro is the Taro Road source code zhijiantianya open source an optimized refactored efficient backend management system framework for the development of enterprise backend , SaaS platform , WeChat small program backend and so on. ruoyi-vue-pro 2.4.1 version of a security vulnerability ,...

The vulnerability of the formWifiBasicSet() function in the microprogramming software for Tenda F1202 allows a hacker to manipulate the accessibility of protected information.

The vulnerability of the formWifiBasicSet function in the Tenda F1202 router’s microprogramming software is related to the operation that goes beyond the buffer in memory when processing the security parameter. Exploiting this vulnerability could allow an attacker to compromise the accessibility ...

Codezips Hospital Management System 注入漏洞

Codezips Hospital Management System is an open source hospital management system from Codezips. An injection vulnerability exists in Codezips Hospital Management System version 1.0, which stems from an incorrect manipulation of a parameter ID that can lead to SQL injection...

CVE-2024-11822 Server-Side Request Forgery (SSRF) in langgenius/dify

langgenius/dify version 0.9.1 contains a Server-Side Request Forgery SSRF vulnerability. The vulnerability exists due to improper handling of the apiendpoint parameter, allowing an attacker to make direct requests to internal network services. This can lead to unauthorized access to internal...

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Overview camaleoncms is a dynamic and advanced content management system based on Ruby on Rails as an alternative to Wordpress. Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via the updatedajax method of the...

Tenda AC15 Buffer Overflow Vulnerability (CNVD-2025-09165)

The Tenda AC15 is a wireless router from the Chinese company Tenda. The Tenda AC15 suffers from a buffer overflow vulnerability that stems from improper handling of the parameter src, no details of the vulnerability are provided at this time...

The vulnerability of D-Link DSL-3782 router microprogramming software, related to the lack of measures to neutralize special elements, allows a hacker to execute arbitrary commands.

The vulnerability of D-Link DSL-3782 router’s microprogramming software is related to the lack of measures taken to neutralize special elements during the processing of parameters sambawg and sambanbn. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Raisecom Multi-Service Intelligent Gateway 命令注入漏洞

Raisecom Multi-Service Intelligent Gateway is a Multi-Service Intelligent Gateway from Raisecom China. A command injection vulnerability exists in Raisecom Multi-Service Intelligent Gateway 20250208 and earlier versions, which stems from improper parameter handling, resulting in OS command...

WordPress plugin Chalet-Montagne.com Tools 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

SourceCodester Image Compressor Tool 跨站脚本漏洞

SourceCodester Image Compressor Tool is an open source image compression tool from Sourcecodester. A cross-site scripting vulnerability exists in SourceCodester Image Compressor Tool version 1.0, which stems from an incorrect manipulation of the parameter image that can lead to cross-site scripti...

RT-Thread 访问控制错误漏洞

RT-Thread is an open source IoT real-time operating system RTOS from RT-Thread Open Source. An access control error vulnerability exists in RT-Thread version 5.1.0 and earlier, which stems from improper handling of parameters in the systhreadcreate function, resulting in a risk of local informati...

Mitel OpenScape 4000和OpenScape 4000 Manager 安全漏洞

Mitel OpenScape 4000 and Mitel OpenScape 4000 Manager are both products of Mitel Corporation of Canada.Mitel OpenScape 4000 is a hybrid IP communications platform.Mitel OpenScape 4000 Manager is a management platform. A security vulnerability exists in Mitel OpenScape 4000 and Mitel OpenScape 400...

CVE-2024-4320

A remote code execution RCE vulnerability exists in the '/installextension' endpoint of the parisneo/lollms-webui application, specifically within the @router.post"/installextension" route handler. The vulnerability arises due to improper handling of the name parameter in the...

Celk Sistemas Celk Saude 安全漏洞

Celk Sistemas Celk Saude is a health sector management software from Celk Sistemas, Brazil. A security vulnerability exists in Celk Sistemas Celk Saude version 3.1.252.1, which stems from improper validation or cleanup of erro parameters, resulting in vulnerability to injection attacks...

OESA-2025-1054 podman security update

Podman manages the entire container ecosystem which includes pods, containers, container images, and container volumes using the libpod library. Security Fixes: Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of...

CVE-2024-12311

The Email Subscribers by Icegram Express WordPress plugin before 5.7.44 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

My-Blog 代码问题漏洞

My-Blog is a Java blog system implemented by SpringBoot + Mybatis + Thymeleaf and other technologies, with beautiful pages, full functionality, easy deployment and perfect code. A code issue exists in My-Blog version 1.0, which stems from an incorrect operation of the parameter editormd-image-fil...

tarzan-cms 代码问题漏洞

tarzan-cms is a JAVA version of a modern open source CMS management system with a new technology stack by the individual developer of taishan in China. A code issue vulnerability exists in tarzan-cms version 1.0.0, which stems from an incorrect manipulation of the parameter file that can lead to...

CodeAstro House Rental Management System 注入漏洞

CodeAstro House Rental Management System is a house rental management system from CodeAstro. An injection vulnerability exists in CodeAstro House Rental Management System version 1.0, which stems from an incorrect manipulation of the parameter f/e/p/m/o/n/c/s/ci/a that can result in an SQL...

TreasureHunt 注入漏洞

TreasureHunt is a TreasureHuntGame open source automated problem generation tool and challenge-based competition for teaching computer security. An injection vulnerability exists in TreasureHunt version 963e0e0 and prior versions, which stems from the fact that incorrect manipulation of the...