Lucene search
K

10 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-21793

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00241EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2025-29044

Malicious code in bioql PyPI...

8.8CVSS6.5AI score0.00105EPSS
Exploits1References5
OSV
OSV
added 2025/09/26 1:15 a.m.2 views

CVE-2025-10989

A security flaw has been discovered in yangzongzhuan RuoYi up to 4.8.1. This vulnerability affects unknown code of the file /system/role/authUser/selectAll. Performing manipulation of the argument userIds results in improper authorization. The attack can be initiated remotely. The exploit has bee...

8.8CVSS6.9AI score
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/09/26 12:0 a.m.7 views

PT-2025-39468

Name of the Vulnerable Software and Affected Versions yangzongzhuan RuoYi versions up to 4.8.1 Description A security flaw exists in yangzongzhuan RuoYi. The issue involves improper authorization due to manipulation of the userIds argument in the file '/system/role/authUser/selectAll'. This allow...

6.5CVSS6AI score0.00077EPSS
Exploits1References9
RedhatCVE
RedhatCVE
added 2025/09/14 1:33 p.m.7 views

CVE-2025-10318

A vulnerability was identified in JeecgBoot up to 3.8.2. Affected by this vulnerability is an unknown functionality of the file /api/system/sendWebSocketMsg of the component WebSocket Message Handler. The manipulation of the argument userIds leads to improper authorization. The attack can be...

8.8CVSS6.6AI score0.00105EPSS
Exploits1References1
NVD
NVD
added 2025/09/13 8:15 p.m.1 views

CVE-2025-10384

A flaw has been found in yangzongzhuan RuoYi up to 4.8.1. Affected by this vulnerability is an unknown functionality of the file /system/role/authUser/cancelAll of the component Role Handler. Executing manipulation of the argument roleId/userIds can lead to improper authorization. The attack may ...

5.5CVSS0.00062EPSS
Exploits0References4
NVD
NVD
added 2025/07/17 7:15 p.m.3 views

CVE-2025-50240

nbcio-boot v1.0.3 was discovered to contain a SQL injection vulnerability via the userIds parameter at /sys/user/deleteRecycleBin...

9.8CVSS0.00241EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/07/17 12:0 a.m.3 views

CVE-2025-50240

nbcio-boot v1.0.3 was discovered to contain a SQL injection vulnerability via the userIds parameter at /sys/user/deleteRecycleBin...

8.5AI score0.00241EPSS
Exploits0References2
CVE
CVE
added 2025/07/17 12:0 a.m.15 views

CVE-2025-50240

CVE-2025-50240 affects nbcio-boot v1.0.3. A SQL injection vulnerability is exposed via the userIds parameter at the /sys/user/deleteRecycleBin endpoint. The issue is tied to improper handling of user input in SQL queries, enabling high-impact results if exploited. Some sources describe remediatio...

9.8CVSS8.3AI score0.00241EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/07/17 12:0 a.m.1 views

Nbcio-Boot 安全漏洞

Nbcio-Boot Yishida Enterprise Management Platform is an enterprise management platform by the individual developer Ningbo A Cheng nbacheng in China. A security vulnerability exists in Nbcio-Boot version 1.0.3, which stems from improper handling of the userIds parameter and may lead to SQL injecti...

9.8CVSS7.7AI score0.00241EPSS
Exploits0References2
Rows per page
Query Builder