EUVD-2025-25426

Malicious code in bioql PyPI...

CVE-2025-55367

Incorrect access control in the component \controller\SupplierController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier status under any account...

CVE-2025-55367

Incorrect access control in the component \controller\SupplierController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier status under any account...

CVE-2025-55367

Incorrect access control in the component \controller\SupplierController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier status under any account...

CVE-2025-55367

Incorrect access control in the component \controller\SupplierController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier status under any account...

CVE-2025-55367

CVE-2025-55367 affects jshERP v3.5 due to an incorrect access-control flaw in the SupplierController.java component. This vulnerability permits unauthorized attackers to arbitrarily modify the supplier status under any account. Documents consistently describe the issue and target component, but d...

CVE-2025-55367

Incorrect access control in the component \controller\SupplierController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier status under any account...

itsourcecode Agri-Trading Online Shopping System 注入漏洞

itsourcecode Agri-Trading Online Shopping System is itsourcecode open source an online shopping system . Itsourcecode Agri-Trading Online Shopping System 1.0 and earlier versions have an injection vulnerability, the vulnerability stems from improper manipulation of the parameter supplier in the...