CVE-2026-106700

ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management endpoint PUT /api/users/resetPwd of me.zhengjie.modules.system.rest.UserController. The method lacks the method-level authorization check applied to all other user-management endpoints and performs n...

PT-2026-115212

ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management endpoint PUT /api/users/resetPwd of me.zhengjie.modules.system.rest.UserController. The method lacks the method-level authorization check applied to all other user-management endpoints and performs n...

CVE-2025-6738

A vulnerability, which was classified as critical, has been found in huija bicycleSharingServer up to 7b8a3ba48ad618604abd4797d2e7cf3b5ac7625a. Affected by this issue is the function userDao.selectUserByUserNameLike of the file UserServiceImpl.java. The manipulation of the argument Username leads...

CVE-2025-6738

CVE-2025-6738 affects huija bicycleSharingServer (up to commit 7b8a3ba48ad618604abd4797d2e7cf3b5ac7625a). The vulnerability is in userDao.selectUserByUserNameLike in UserServiceImpl.java, where improper handling of the Username argument enables SQL injection. The issue is remotely exploitable and...