CVE-2025-66744

The Yonyou YonBIP business innovation platform (versions v3 and before ) is vulnerable to a path traversal flaw in the LoginWithV8 interface of the series data application service system. This vulnerability is caused by improper validation of inputs, which allows unauthorized attackers to access ...

EUVD-2023-56607

Malicious code in bioql PyPI...

CVE-2023-51928

An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction method of YonBIP v323.05 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2023-51925

An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction method of YonBIP v323.05 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2023-51906

An issue in yonyou YonBIP v323.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component...

YonBIP Security Vulnerability

yonyou YonBIP is a business innovation platform from China's UFIDA yonyou Company. A security vulnerability exists in YonBIP v323.05, which stems from an arbitrary file upload vulnerability that allows an attacker to execute arbitrary code by uploading a crafted file...

PT-2024-14329

Name of the Vulnerable Software and Affected Versions YonBIP version 3 23.05 Description An arbitrary file upload vulnerability in the doAction method of nccloud.web.arcp.taskmonitor.action.ArcpUploadAction allows attackers to execute arbitrary code via uploading a crafted file. Recommendations F...

PT-2024-14325

Name of the Vulnerable Software and Affected Versions YonBIP version 3 23.05 Description An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface allows attackers to execute arbitrary code via uploading a crafted file. Recommendations For YonBIP version 3 23.0...