EUVD-2025-8270

Malicious code in bioql PyPI...

CVE-2025-2835

A vulnerability was found in zhangyd-c OneBlog up to 2.3.9. It has been declared as problematic. Affected by this vulnerability is the function autoLink of the file com/zyd/blog/controller/RestApiController.java. The manipulation leads to server-side request forgery. The attack can be launched...

CVE-2025-2833

A vulnerability was found in zhangyd-c OneBlog up to 2.3.9. It has been classified as problematic. Affected is an unknown function of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to inefficient regular expression complexity. It is possible to launch th...

PT-2025-13029

Name of the Vulnerable Software and Affected Versions zhangyd-c OneBlog versions up to 2.3.9 Description A vulnerability was found in the HTTP Header Handler component. The manipulation of the X-Forwarded-For argument leads to inefficient regular expression complexity, allowing for a remote attac...

CVE-2025-2833: Inefficient Regular Expression Complexity

A vulnerability was found in zhangyd-c OneBlog up to 2.3.9. It has been classified as problematic. Affected is an unknown function of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to inefficient regular expression complexity. It is possible to launch th...

PT-2025-13030

Name of the Vulnerable Software and Affected Versions zhangyd-c OneBlog versions up to 2.3.9 Description A vulnerability was found in the function autoLink of the file com/zyd/blog/controller/RestApiController.java. The manipulation leads to server-side request forgery. The attack can be launched...

CVE-2025-2835: Server-Side Request Forgery (SSRF)

A vulnerability was found in zhangyd-c OneBlog up to 2.3.9. It has been declared as problematic. Affected by this vulnerability is the function autoLink of the file com/zyd/blog/controller/RestApiController.java. The manipulation leads to server-side request forgery. The attack can be launched...