3791
|
- |
|
-
|
-
|
A vulnerability, which was classified as critical, was found in leiyuxi cy-fast 1.0. Affected is the function listData of the file /sys/role/listData. The manipulation of the argument order leads to …
|
CWE-89 CWE-74
SQL Injection Injection
|
CVE-2025-0333
|
2025-01-9 14:15 |
2025-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
3792
|
- |
|
-
|
-
|
A vulnerability, which was classified as critical, has been found in YunzMall up to 2.4.2. This issue affects the function changePwd of the file /app/platform/controllers/ResetpwdController.php of th…
|
CWE-640
Weak Password Recovery Mechanism for Forgotten Password
|
CVE-2025-0331
|
2025-01-9 14:15 |
2025-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
3793
|
- |
|
-
|
-
|
A vulnerability, which was classified as critical, has been found in KaiYuanTong ECT Platform up to 2.0.0. Affected by this issue is some unknown functionality of the file /public/server/runCode.php …
|
CWE-77 CWE-74
Command Injection Injection
|
CVE-2025-0328
|
2025-01-9 14:15 |
2025-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
3794
|
7.4 |
HIGH
Network
|
-
|
-
|
A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker to decrypt previously encrypted messages or forge signatures by exchanging …
|
CWE-385
Covert Timing Channel
|
CVE-2025-0306
|
2025-01-9 13:15 |
2025-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
3795
|
5.6 |
MEDIUM
Local
|
-
|
-
|
A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application…
|
CWE-122
Heap-based Buffer Overflow
|
CVE-2024-56827
|
2025-01-9 13:15 |
2025-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
3796
|
5.6 |
MEDIUM
Local
|
-
|
-
|
A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application…
|
CWE-122
Heap-based Buffer Overflow
|
CVE-2024-56826
|
2025-01-9 13:15 |
2025-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
3797
|
- |
|
-
|
-
|
A vulnerability classified as problematic was found in SingMR HouseRent 1.0. This vulnerability affects unknown code of the file /toAdminUpdateHousePage?hID=30. The manipulation leads to cross site s…
|
CWE-79 CWE-94
Cross-site Scripting Code Injection
|
CVE-2024-13213
|
2025-01-9 13:15 |
2025-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
3798
|
- |
|
-
|
-
|
A vulnerability classified as critical has been found in SingMR HouseRent 1.0. This affects the function singleUpload/upload of the file src/main/java/com/house/wym/controller/AddHouseController.java…
|
CWE-284 CWE-434
Improper Access Control Unrestricted Upload of File with Dangerous Type
|
CVE-2024-13212
|
2025-01-9 13:15 |
2025-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
3799
|
- |
|
-
|
-
|
A vulnerability was found in SingMR HouseRent 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file src/main/java/com/house/wym/controller/AdminControll…
|
CWE-284 CWE-266
Improper Access Control Incorrect Privilege Assignment
|
CVE-2024-13211
|
2025-01-9 13:15 |
2025-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
3800
|
- |
|
-
|
-
|
A vulnerability was found in donglight bookstore???????? 1.0. It has been declared as critical. Affected by this vulnerability is the function uploadPicture of the file src/main/java/org/zdd/bookstor…
|
CWE-284 CWE-434
Improper Access Control Unrestricted Upload of File with Dangerous Type
|
CVE-2024-13210
|
2025-01-9 13:15 |
2025-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|