10 matches found
EUVD-2025-29044
Malicious code in bioql PyPI...
EUVD-2025-21793
Malicious code in bioql PyPI...
CVE-2025-10989 yangzongzhuan RuoYi selectAll improper authorization
A security flaw has been discovered in yangzongzhuan RuoYi up to 4.8.1. This vulnerability affects unknown code of the file /system/role/authUser/selectAll. Performing manipulation of the argument userIds results in improper authorization. The attack can be initiated remotely. The exploit has bee...
PT-2025-39468
Name of the Vulnerable Software and Affected Versions yangzongzhuan RuoYi versions up to 4.8.1 Description A security flaw exists in yangzongzhuan RuoYi. The issue involves improper authorization due to manipulation of the userIds argument in the file '/system/role/authUser/selectAll'. This allow...
CVE-2025-10318
A vulnerability was identified in JeecgBoot up to 3.8.2. Affected by this vulnerability is an unknown functionality of the file /api/system/sendWebSocketMsg of the component WebSocket Message Handler. The manipulation of the argument userIds leads to improper authorization. The attack can be...
CVE-2025-10384
A flaw has been found in yangzongzhuan RuoYi up to 4.8.1. Affected by this vulnerability is an unknown functionality of the file /system/role/authUser/cancelAll of the component Role Handler. Executing manipulation of the argument roleId/userIds can lead to improper authorization. The attack may ...
CVE-2025-50240
nbcio-boot v1.0.3 was discovered to contain a SQL injection vulnerability via the userIds parameter at /sys/user/deleteRecycleBin...
Nbcio-Boot 安全漏洞
Nbcio-Boot Yishida Enterprise Management Platform is an enterprise management platform by the individual developer Ningbo A Cheng nbacheng in China. A security vulnerability exists in Nbcio-Boot version 1.0.3, which stems from improper handling of the userIds parameter and may lead to SQL injecti...
CVE-2025-50240
The nbcio-boot version 1.0.3 (an enterprise management platform by Ningbo A Cheng) contains a SQL injection vulnerability. The flaw exists because the userIds parameter at the /sys/user/deleteRecycleBin API endpoint is not properly handled, allowing for improper neutralization of special elements...
