Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

48 matches found

NVD
NVD•added 2025/07/20 12:15 p.m.•8 views

CVE-2025-7888

A vulnerability was found in TDuckCloud tduck-platform 5.1 and classified as critical. This issue affects the function UserFormDataMapper of the file src/main/java/com/tduck/cloud/form/mapper/UserFormDataMapper.java. The manipulation of the argument formKey leads to sql injection. The attack may ...

9.8CVSS0.00488EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment•added 2025/07/20 12:2 p.m.•5 views

CVE-2025-7888 TDuckCloud tduck-platform UserFormDataMapper.java UserFormDataMapper sql injection

A vulnerability was found in TDuckCloud tduck-platform 5.1 and classified as critical. This issue affects the function UserFormDataMapper of the file src/main/java/com/tduck/cloud/form/mapper/UserFormDataMapper.java. The manipulation of the argument formKey leads to sql injection. The attack may ...

6.5CVSS6.7AI score0.00488EPSS
SaveExploits1References4
Cvelist
Cvelist•added 2025/07/20 12:2 p.m.•21 views

CVE-2025-7888 TDuckCloud tduck-platform UserFormDataMapper.java UserFormDataMapper sql injection

A vulnerability was found in TDuckCloud tduck-platform 5.1 and classified as critical. This issue affects the function UserFormDataMapper of the file src/main/java/com/tduck/cloud/form/mapper/UserFormDataMapper.java. The manipulation of the argument formKey leads to sql injection. The attack may ...

6.5CVSS0.00488EPSS
SaveExploits1References4
CVE
CVE•added 2025/07/20 12:2 p.m.•39 views

CVE-2025-7888

TDuckCloud tduck-platform 5.1 is affected by a SQL injection in the UserFormDataMapper (src/main/java/com/tduck/cloud/form/mapper/UserFormDataMapper.java) driven by manipulation of the formKey argument. The vulnerability is remotely exploitable and has publicly disclosed exploits. Multiple connec...

9.8CVSS7.5AI score0.00488EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD•added 2025/07/20 12:0 a.m.•9 views

TDuckCloud tduck-platform 注入漏洞

TDuckCloud tduck-platform is an open source form survey system from China's Zhongda Numerical Wei TDuckCloud company. An injection vulnerability exists in TDuckCloud tduck-platform version 5.1, which stems from incorrect manipulation of the formKey parameter of the function UserFormDataMapper in...

9.8CVSS6.9AI score0.00488EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies•added 2025/07/20 12:0 a.m.•12 views

PT-2025-30191 · Tduckcloud · Tduck-Platform

Name of the Vulnerable Software and Affected Versions: TDuckCloud tduck-platform version 5.1 Description: A critical issue exists in TDuckCloud tduck-platform 5.1 related to SQL injection. The UserFormDataMapper function within the src/main/java/com/tduck/cloud/form/mapper/UserFormDataMapper.java...

6.5CVSS6.8AI score0.00488EPSS
SaveExploits1References10
RedhatCVE
RedhatCVE•added 2025/05/23 11:57 a.m.•12 views

CVE-2025-0558

A vulnerability classified as critical was found in TDuckCloud tduck-platform up to 4.0. This vulnerability affects the function QueryProThemeRequest of the file src/main/java/com/tduck/cloud/form/request/QueryProThemeRequest.java. The manipulation of the argument color leads to sql injection. Th...

9.8CVSS7.2AI score0.00425EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2025/05/23 4:59 a.m.•7 views

CVE-2023-51805

SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information via the getFormKey parameter in the search function of FormDataMysqlService.java file...

8.1CVSS7.6AI score0.00617EPSS
SaveExploits1
NVD
NVD•added 2025/01/18 1:15 p.m.•12 views

CVE-2025-0558

A vulnerability classified as critical was found in TDuckCloud tduck-platform up to 4.0. This vulnerability affects the function QueryProThemeRequest of the file src/main/java/com/tduck/cloud/form/request/QueryProThemeRequest.java. The manipulation of the argument color leads to sql injection. Th...

9.8CVSS0.00425EPSS
SaveExploits0References4
OSV
OSV•added 2025/01/18 1:15 p.m.•3 views

CVE-2025-0558

A vulnerability classified as critical was found in TDuckCloud tduck-platform up to 4.0. This vulnerability affects the function QueryProThemeRequest of the file src/main/java/com/tduck/cloud/form/request/QueryProThemeRequest.java. The manipulation of the argument color leads to sql injection. Th...

9.8CVSS7.4AI score
SaveExploits0References4
CVE
CVE•added 2025/01/18 1:0 p.m.•51 views

CVE-2025-0558

CVE-2025-0558 affects TDuckCloud tduck-platform up to 4.0. The vulnerability lies in the function QueryProThemeRequest (src/main/java/com/tduck/cloud/form/request/QueryProThemeRequest.java), where manipulation of the color parameter enables an SQL injection. Impact as described across sources: re...

9.8CVSS6.8AI score0.00425EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist•added 2025/01/18 1:0 p.m.•21 views

CVE-2025-0558 TDuckCloud tduck-platform QueryProThemeRequest.java QueryProThemeRequest sql injection

A vulnerability classified as critical was found in TDuckCloud tduck-platform up to 4.0. This vulnerability affects the function QueryProThemeRequest of the file src/main/java/com/tduck/cloud/form/request/QueryProThemeRequest.java. The manipulation of the argument color leads to sql injection. Th...

6.5CVSS0.00425EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment•added 2025/01/18 1:0 p.m.•11 views

CVE-2025-0558 TDuckCloud tduck-platform QueryProThemeRequest.java QueryProThemeRequest sql injection

A vulnerability classified as critical was found in TDuckCloud tduck-platform up to 4.0. This vulnerability affects the function QueryProThemeRequest of the file src/main/java/com/tduck/cloud/form/request/QueryProThemeRequest.java. The manipulation of the argument color leads to sql injection. Th...

6.5CVSS6.8AI score0.00425EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies•added 2025/01/18 12:0 a.m.•7 views

PT-2025-3951 · Tduckcloud · Tduck-Platform

Name of the Vulnerable Software and Affected Versions: TDuckCloud tduck-platform versions up to 4.0 Description: A critical issue was found in the TDuckCloud tduck-platform, affecting the function QueryProThemeRequest of the file src/main/java/com/tduck/cloud/form/request/QueryProThemeRequest.jav...

6.5CVSS7.2AI score0.00425EPSS
SaveExploits0References9
CNNVD
CNNVD•added 2025/01/18 12:0 a.m.•6 views

TDuckCloud tduck-platform 注入漏洞

TDuckCloud tduck-platform is an open source form survey system from China's Zongda Numerical Wei TDuckCloud company. An injection vulnerability exists in TDuckCloud tduck-platform version 4.0 and earlier, which originates in src/main/java/com/tduck/cloud/form/request/QueryProThemeRequest.java in...

9.8CVSS6.9AI score0.00425EPSS
SaveExploits0References5
NVD
NVD•added 2024/09/11 7:15 p.m.•21 views

CVE-2024-8692

A vulnerability classified as critical was found in TDuckCloud TDuckPro up to 6.3. Affected by this vulnerability is an unknown functionality. The manipulation leads to weak password recovery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The...

9.8CVSS0.00513EPSS
SaveExploits0References4
OSV
OSV•added 2024/09/11 7:15 p.m.•7 views

CVE-2024-8692

A vulnerability classified as critical was found in TDuckCloud TDuckPro up to 6.3. Affected by this vulnerability is an unknown functionality. The manipulation leads to weak password recovery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The...

9.8CVSS5.2AI score0.00513EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment•added 2024/09/11 6:31 p.m.•17 views

CVE-2024-8692 TDuckCloud TDuckPro password recovery

A vulnerability classified as critical was found in TDuckCloud TDuckPro up to 6.3. Affected by this vulnerability is an unknown functionality. The manipulation leads to weak password recovery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The...

6.9CVSS6.9AI score0.00513EPSS
SaveExploits0References4
CVE
CVE•added 2024/09/11 6:31 p.m.•56 views

CVE-2024-8692

TDuckCloud TDuckPro

9.8CVSS5.9AI score0.00513EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist•added 2024/09/11 6:31 p.m.•25 views

CVE-2024-8692 TDuckCloud TDuckPro password recovery

A vulnerability classified as critical was found in TDuckCloud TDuckPro up to 6.3. Affected by this vulnerability is an unknown functionality. The manipulation leads to weak password recovery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The...

6.9CVSS0.00513EPSS
SaveExploits0References4
Rows per page
Query Builder