395 matches found
CVE-2025-8737
The CVE-2025-8737 entry concerns zlt2000 microservices-platform (up to 6.0.0). A vulnerability exists in the onLogoutSuccess function (OauthLogoutSuccessHandler.java) where manipulating the redirect_url argument causes an open redirect. Exploitation can be performed remotely, and public disclosur...
zlt-microservices-platform 访问控制错误漏洞
zlt-microservices-platform is a platform system for zlt individual developers. An access control error vulnerability exists in zlt-microservices-platform version 6.0.0 and earlier, which stems from an information disclosure issue...
pybbs 代码注入漏洞
pybbs is a community platform for Java development by iuiu individual developers. A code injection vulnerability exists in pybbs 6.0.0 and earlier versions, which stems from improper handling of the parameter Name in the file /admin/tag/list, which could lead to a cross-site scripting attack...
pybbs 安全漏洞
pybbs is a community platform for Java development by iuiu individual developers. A security vulnerability exists in pybbs 6.0.0 and earlier versions, which stems from a guessable CAPTCHA issue in the function adminlogin/login in the CAPTCHA handling component...
SUSE CVE-2024-32867
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, various problems in handling of fragmentation anomalies can lead to mis-detection of rules and policy. This vulnerability is fixed in 7.0.5 or 6.0.19...
BossSoft CRM 注入漏洞
BossSoft CRM is a customer relationship management software from BossSoft, a Chinese company. An injection vulnerability exists in BossSoft CRM version 6.0, which originates from SQL injection due to incorrect manipulation of the parameter cstid in the file /crm/module/HNDCBascustomPrmSearchDtl.j...
MongoDB Server 安全漏洞
MongoDB Server is the United States MongoDB company's set of open source NoSQL database . The database provides collection-oriented storage , dynamic query , data replication and automatic failover and other functions . A security vulnerability exists in MongoDB Server versions prior to 6.0.23,...
CVE-2025-50015 WordPress Hand Talk plugin <= 6.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rodrigo Bastos Hand Talk handtalk allows Stored XSS.This issue affects Hand Talk: from n/a through = 6.1...
WordPress plugin Hand Talk 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2024-54172
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...
OpenC3 COSMOS 安全漏洞
OpenC3 COSMOS is an OpenC3 open source application. A security vulnerability exists in OpenC3 COSMOS versions prior to v6.0.2, which stems from the disclosure of service credentials stored in an environment variable, which could lead to an attacker accessing the credentials...
varnish:6 security update
varnish 6.0.13-1.1 - Resolves: RHEL-89695 - varnish: request smuggling attacks CVE-2025-47905 varnish-modules...
CVE-2024-22889
Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via sending a crafted request...
CVE-2024-31261
Missing Authorization vulnerability in Aakash Chakravarthy Announcer – Notification & message bars.This issue affects Announcer – Notification & message bars: from n/a through 6.0...
CVE-2024-25532
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the btid parameter at /include/getdict.aspx...
CVE-2023-52149
Cross-Site Request Forgery CSRF vulnerability in Wow-Company Floating Button.This issue affects Floating Button: from n/a through 6.0...
CVE-2023-46699
Cross-site request forgery CSRF vulnerability exists in the User settings /me page of GROWI versions prior to v6.0.0. If a user views a malicious page while logging in, settings may be changed without the user's intention...
CVE-2023-31216
Cross-Site Request Forgery CSRF vulnerability in Ultimate Member plugin = 2.6.0 versions...