4 matches found
CVE-2025-25618
CVE-2025-25618 Unifiedtransform v2.0 عرضة لضعف التحكم في الوصول غير الصحيح، مما يسمح للمعلمين بتغيير اسم القسم ورقم الغرفة — وهي صلاحيات يجب أن تكون مقصورة على المسؤولين. المطور: Unifiedtransform PoC الخطوة 1: قم بتسجيل الدخول إلى التطبيق كمعلم. الخطوة 2: انتقل إلى نقطة النهاية التالية:...
JFinalCMS 安全漏洞
JFinalCMS is a content management system. JFinalCMS v5.0.0 version exists cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the section management department, an attacker can exploit this vulnerability by injecti...
The vulnerability of the Kafka platform’s message and section management package for security organization, automation, and Cortex XSOAR responses lies in the unencrypted storage of key certificates, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the Kafka platform’s message and section management package for security organization, automation, and Cortex XSOAR response is related to the unencrypted storage of key certificates. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to...
