EUVD-2025-6241

Malicious code in bioql PyPI...

CVE-2025-2089

A vulnerability has been found in StarSea99 starsea-mall 1.0/2.X and classified as critical. Affected by this vulnerability is the function updateUserInfo of the file /personal/updateInfo of the component com.siro.mall.controller.mall.UserController. The manipulation of the argument userId leads ...

CVE-2025-2087

A vulnerability, which was classified as problematic, has been found in StarSea99 starsea-mall 1.0. This issue affects some unknown processing of the file /admin/goods/update. The manipulation of the argument goodsName leads to cross site scripting. The attack may be initiated remotely. The explo...

CVE-2025-0399

CVE-2025-0399 (Mode C): StarSea99 Starsea-mall 1.0 contains a vulnerability in the UploadController (src/main/java/com/siro/mall/controller/common/uploadController.java). The issue arises from manipulating the file argument, enabling unrestricted uploads. The flaw is exploitable remotely and, per...