CVE-2025-3037

A vulnerability has been found in yzk2356911358 StudentServlet-JSP cc0cdce25fbe43b6c58b60a77a2c85f52d2102f5/d4d7a0643f1dae908a4831206f2714b21820f991 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be...

PT-2025-14012 · Unknown · Guominjim Personmanage

Name of the Vulnerable Software and Affected Versions: GuoMinJim PersonManage affected versions not specified Description: A critical issue has been found in GuoMinJim PersonManage. This issue affects the function preHandle of the file /login/. The manipulation of the argument Request leads to pa...

CVE-2025-3037

Technical details (affected software, versions, root cause, and fix) are not publicly provided in the supplied documents. Monitor for updates as more information becomes available.

CVE-2025-3037 yzk2356911358 StudentServlet-JSP cross-site request forgery

A vulnerability has been found in yzk2356911358 StudentServlet-JSP cc0cdce25fbe43b6c58b60a77a2c85f52d2102f5/d4d7a0643f1dae908a4831206f2714b21820f991 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be...

CVE-2025-3036

A vulnerability, which was classified as problematic, was found in yzk2356911358 StudentServlet-JSP cc0cdce25fbe43b6c58b60a77a2c85f52d2102f5/d4d7a0643f1dae908a4831206f2714b21820f991. This affects an unknown part of the component Student Management Handler. The manipulation of the argument Name...

CVE-2025-3036 yzk2356911358 StudentServlet-JSP Student Management cross site scripting

A vulnerability, which was classified as problematic, was found in yzk2356911358 StudentServlet-JSP cc0cdce25fbe43b6c58b60a77a2c85f52d2102f5/d4d7a0643f1dae908a4831206f2714b21820f991. This affects an unknown part of the component Student Management Handler. The manipulation of the argument Name...

CVE-2025-2420

CVE-2025-2420 affects 猫宁i Morning (up to bc782730c74ff080494f145cc363a0b4f43f7d3e). The vulnerability is described as a cross-site request forgery affecting an unknown functionality, with remote attack vector. Several connected sources corroborate a CSRF issue and note the vendor uses rolling rel...

CVE-2025-2420 猫宁i Morning cross-site request forgery

A vulnerability classified as problematic was found in 猫宁i Morning up to bc782730c74ff080494f145cc363a0b4f43f7d3e. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed ...

PT-2025-11551

Name of the Vulnerable Software and Affected Versions 猫宁i Morning up to bc782730c74ff080494f145cc363a0b4f43f7d3e Description A vulnerability was found in 猫宁i Morning, affecting an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The...

CVE-2025-2323

CVE-2025-2323 concerns a vulnerability in the 274056675 springboot-openai-chatgpt project where the function updateQuestionCou in /api/mjkj-chat/chat/mng/update/questionCou of the Number of Question Handler can be manipulated to enforce a behavioral workflow. Exploitation is described as remote. ...

CVE-2025-2321

A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this issue is some unknown functionality of the file /api/mjkj-chat/cgform-api/addData/. The manipulation of the argument chatUserID leads to business logic errors. The attack may be...

CVE-2025-2320

A vulnerability has been found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this vulnerability is the function submit of the file /api/blade-user/submit of the component User Handler. The manipulation leads to improper authorization. The attack can be...

CVE-2025-2112

A vulnerability was found in user-xiangpeng yaoqishan up to a47fec4a31cbd13698c592dfdc938c8824dd25e4. It has been declared as critical. Affected by this vulnerability is the function getMediaLisByFilter of the file cn/javaex/yaoqishan/service/mediainfo/MediaInfoService.java. The manipulation of t...

CVE-2025-1553

A vulnerability was found in pankajindevops scale up to 3633544a00245d3df88b6d13d9b3dd0f411be7f6. It has been classified as problematic. Affected is an unknown function of the file /scale/project. The manipulation of the argument goal leads to cross site scripting. It is possible to launch the...

CVE-2025-1553

CVE-2025-1553 affects pankajindevops scale; root cause is a cross-site scripting issue in the /scale/project goal parameter. Exploitation is possible remotely and has been disclosed publicly. No version details or updates are provided; multiple sources indicate there is no available fix yet.

PT-2025-7528 · Unknown · Pankajindevops Scale

Name of the Vulnerable Software and Affected Versions: pankajindevops scale affected versions not specified Description: A vulnerability was found in pankajindevops scale, allowing for cross-site scripting. The manipulation of the goal argument leads to this issue. It is possible to launch the...

CVE-2025-1332

A vulnerability has been found in FastCMS up to 0.1.5 and classified as problematic. This vulnerability affects unknown code of the file /fastcms.html/template/menu of the component Template Menu. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit ha...

CVE-2025-1332 FastCMS Template Menu menu cross site scripting

A vulnerability has been found in FastCMS up to 0.1.5 and classified as problematic. This vulnerability affects unknown code of the file /fastcms.html/template/menu of the component Template Menu. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit ha...

CVE-2025-1228

CVE-2025-1228 affects olajowon Loggrove (Logfile Update Handler) with a path traversal vulnerability in the /read/?page=1&logfile=LOG_Monitor parameter. Affected is an unknown function within the Logfile Update Handler; manipulation of the path argument allows remote exploitation. The exploit has...

CVE-2025-0870 Axiomatic Bento4 Ap4DataBuffer.h GetData heap-based overflow

A vulnerability was found in Axiomatic Bento4 up to 1.6.0-641. It has been rated as critical. Affected by this issue is the function AP4DataBuffer::GetData in the library Ap4DataBuffer.h. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The complexity of ...