CVE-2025-31933 Growatt Cloud Applications Authorization Bypass Through User-Controlled Key

An unauthenticated attacker can check the existence of usernames in the system by querying an API...

GoCD 注入漏洞

GoCd is a continuous delivery server. GoCD suffers from an injection vulnerability that stems from the fact that the gocd-ldap-authentication-plugin included in GoCD Server fails to properly escape special characters when constructing an LDAP query using a username. An attacker could use this...

PT-2019-2768

Name of the Vulnerable Software and Affected Versions Eltex switch web server affected versions not specified Description The issue exists due to the lack of length checks for the restoreUrl, errorCollector, userName$query, and password$query parameters in authorization requests. This can be...