Lucene search
K

69 matches found

CNNVD
CNNVD
added 2025/10/25 12:0 a.m.2 views

White-Jotter 安全漏洞

White-Jotter is a front-end and back-end separation project developed by Antabot individual developers using Vue+Spring Boot, with a full set of development tutorials. White-Jotter 9bcadc and earlier versions have a security vulnerability that originates in the /api/aaa;/... /register component h...

9.8CVSS8AI score0.00507EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/24 6:31 p.m.2 views

EUVD-2025-35863

Antabot White-Jotter up to commit 9bcadc was discovered to contain an unauthenticated remote code execution RCE vulnerability via the component /api/aaa;/../register...

9.8CVSS8.1AI score0.00507EPSS
Exploits0References2
NVD
NVD
added 2025/10/24 4:26 p.m.2 views

CVE-2025-60803

Antabot White-Jotter up to commit 9bcadc was discovered to contain an unauthenticated remote code execution RCE vulnerability via the component /api/aaa;/../register...

9.8CVSS0.00507EPSS
Exploits0References1
OSV
OSV
added 2025/10/24 4:26 p.m.2 views

CVE-2025-60803

Antabot White-Jotter up to commit 9bcadc was discovered to contain an unauthenticated remote code execution RCE vulnerability via the component /api/aaa;/../register...

9.8CVSS6.3AI score0.00507EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/24 12:0 a.m.5 views

CVE-2025-60803

Antabot White-Jotter up to commit 9bcadc was discovered to contain an unauthenticated remote code execution RCE vulnerability via the component /api/aaa;/../register...

0.00507EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/24 12:0 a.m.2 views

CVE-2025-60803

Antabot White-Jotter up to commit 9bcadc was discovered to contain an unauthenticated remote code execution RCE vulnerability via the component /api/aaa;/../register...

8.3AI score0.00507EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/24 12:0 a.m.3 views

PT-2025-43660

Name of the Vulnerable Software and Affected Versions Antabot White-Jotter versions prior to commit 9bcadc Description The software contains an unauthenticated remote code execution RCE issue. The issue is present via the /api/aaa;/../register component. The vulnerability allows for the execution...

9.8CVSS8.1AI score0.00507EPSS
Exploits0References6
CVE
CVE
added 2025/10/24 12:0 a.m.11 views

CVE-2025-60803

CVE-2025-60803 affects Antabot White-Jotter up to commit 9bcadc, with an unauthenticated remote code execution via the component /api/aaa;/../register. The issue is caused by the specific path handling in that component, enabling arbitrary code execution without authentication. Affected versions ...

9.8CVSS8.3AI score0.00507EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-4488

Malicious code in bioql PyPI...

7.6CVSS6.5AI score0.00481EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-33176

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.01054EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-51284

Malicious code in bioql PyPI...

6.3CVSS4.8AI score0.00733EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-51287

Malicious code in bioql PyPI...

5.1CVSS4AI score0.00365EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-51288

Malicious code in bioql PyPI...

5.1CVSS3.9AI score0.00514EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-23976

Malicious code in bioql PyPI...

7.5CVSS5.4AI score0.0036EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-51285

Malicious code in bioql PyPI...

8.8CVSS4.9AI score0.00502EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/08/10 3:32 a.m.9 views

CVE-2025-8708

A vulnerability was found in Antabot White-Jotter 0.22. It has been declared as critical. This vulnerability affects the function CookieRememberMeManager of the file ShiroConfiguration.java of the component com.gm.wj.config.ShiroConfiguration. The manipulation with the input EVANNIGHTLYWAOU leads...

7.5CVSS5.3AI score0.0036EPSS
Exploits1References1
NVD
NVD
added 2025/08/08 3:15 a.m.4 views

CVE-2025-8708

A vulnerability was found in Antabot White-Jotter 0.22. It has been declared as critical. This vulnerability affects the function CookieRememberMeManager of the file ShiroConfiguration.java of the component com.gm.wj.config.ShiroConfiguration. The manipulation with the input EVANNIGHTLYWAOU leads...

7.5CVSS0.0036EPSS
Exploits1References5
OSV
OSV
added 2025/08/08 3:15 a.m.2 views

CVE-2025-8708

A vulnerability was found in Antabot White-Jotter 0.22. It has been declared as critical. This vulnerability affects the function CookieRememberMeManager of the file ShiroConfiguration.java of the component com.gm.wj.config.ShiroConfiguration. The manipulation with the input EVANNIGHTLYWAOU leads...

7.5CVSS7AI score
Exploits0References5
Cvelist
Cvelist
added 2025/08/08 2:32 a.m.11 views

CVE-2025-8708 Antabot White-Jotter com.gm.wj.config.ShiroConfiguration ShiroConfiguration.java CookieRememberMeManager deserialization

A vulnerability was found in Antabot White-Jotter 0.22. It has been declared as critical. This vulnerability affects the function CookieRememberMeManager of the file ShiroConfiguration.java of the component com.gm.wj.config.ShiroConfiguration. The manipulation with the input EVANNIGHTLYWAOU leads...

5CVSS0.0036EPSS
Exploits1References5
CVE
CVE
added 2025/08/08 2:32 a.m.19 views

CVE-2025-8708

CVE-2025-8708 affects Antabot White-Jotter 0.22, specifically the CookieRememberMeManager in ShiroConfiguration.java (com.gm.wj.config.ShiroConfiguration). The vulnerability is triggered by manipulating the input EVANNIGHTLY_WAOU, leading to deserialization. The issue is exploitable remotely and ...

7.5CVSS5.1AI score0.0036EPSS
Exploits1References5Affected Software1
Rows per page
Query Builder