7.5

CVSS3.1

CVE-2025-11131 -

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed

๐Ÿ“… Published: Dec. 1, 2025, 7:35 a.m. ๐Ÿ”„ Last Modified: Dec. 1, 2025, 7:30 p.m.

6.9

CVSS4.0

CVE-2025-13814 - moxi159753 Mogu Blog v2 uploadPicsByUrl LocalFileServiceImpl.uploadPictureByUrl server-side requestโ€ฆ

A security flaw has been discovered in moxi159753 Mogu Blog v2 up to 5.2. Impacted is the function LocalFileServiceImpl.uploadPictureByUrl of the file /file/uploadPicsByUrl. The manipulation results in server-side request forgery. The attack can be launched remotely. The exploit has been released tโ€ฆ

๐Ÿ“… Published: Dec. 1, 2025, 7:32 a.m. ๐Ÿ”„ Last Modified: Dec. 3, 2025, 10:02 p.m.

6.3

CVSS4.0

CVE-2025-13813 - moxi159753 Mogu Blog v2 Storage Management Endpoint storage authorization

A vulnerability was identified in moxi159753 Mogu Blog v2 up to 5.2. This issue affects some unknown processing of the file /storage/ of the component Storage Management Endpoint. The manipulation leads to missing authorization. The attack can be initiated remotely. The attack's complexity is ratedโ€ฆ

๐Ÿ“… Published: Dec. 1, 2025, 7:02 a.m. ๐Ÿ”„ Last Modified: Dec. 3, 2025, 10:02 p.m.

5.3

CVSS4.0

CVE-2025-13811 - jsnjfz WebStack-Guns PageFactory.java sql injection

A vulnerability was determined in jsnjfz WebStack-Guns 1.0. This vulnerability affects unknown code of the file src/main/java/com/jsnjfz/manage/core/common/constant/factory/PageFactory.java. Executing a manipulation of the argument sort can lead to sql injection. It is possible to launch the attackโ€ฆ

๐Ÿ“… Published: Dec. 1, 2025, 6:32 a.m. ๐Ÿ”„ Last Modified: Feb. 24, 2026, 7:16 a.m.

6.9

CVSS4.0

CVE-2025-13810 - jsnjfz WebStack-Guns KaptchaController.java renderPicture path traversal

A vulnerability was found in jsnjfz WebStack-Guns 1.0. This affects the function renderPicture of the file src/main/java/com/jsnjfz/manage/modular/system/controller/KaptchaController.java. Performing a manipulation results in path traversal. It is possible to initiate the attack remotely. The exploโ€ฆ

๐Ÿ“… Published: Dec. 1, 2025, 6:02 a.m. ๐Ÿ”„ Last Modified: Feb. 24, 2026, 7:16 a.m.

5.3

CVSS4.0

CVE-2025-13809 - orionsec orion-ops SSH Connection MachineInfoController.java server-side request forgery

A vulnerability has been found in orionsec orion-ops up to 5925824997a3109651bbde07460958a7be249ed1. Affected by this issue is some unknown functionality of the file orion-ops-api/orion-ops-web/src/main/java/cn/orionsec/ops/controller/MachineInfoController.java of the component SSH Connection Handlโ€ฆ

๐Ÿ“… Published: Dec. 1, 2025, 5:32 a.m. ๐Ÿ”„ Last Modified: Dec. 4, 2025, 8:15 p.m.

6.9

CVSS4.0

CVE-2025-13808 - orionsec orion-ops User Profile UserController.java update improper authorization

A flaw has been found in orionsec orion-ops up to 5925824997a3109651bbde07460958a7be249ed1. Affected by this vulnerability is the function update of the file orion-ops-api/orion-ops-web/src/main/java/cn/orionsec/ops/controller/UserController.java of the component User Profile Handler. This manipulaโ€ฆ

๐Ÿ“… Published: Dec. 1, 2025, 5:02 a.m. ๐Ÿ”„ Last Modified: Dec. 4, 2025, 8:21 p.m.

5.3

CVSS4.0

CVE-2025-13807 - orionsec orion-ops API MachineKeyController.java MachineKeyController improper authorization

A vulnerability was detected in orionsec orion-ops up to 5925824997a3109651bbde07460958a7be249ed1. Affected is the function MachineKeyController of the file orion-ops-api/orion-ops-web/src/main/java/cn/orionsec/ops/controller/MachineKeyController.java of the component API. The manipulation results โ€ฆ

๐Ÿ“… Published: Dec. 1, 2025, 4:32 a.m. ๐Ÿ”„ Last Modified: Dec. 4, 2025, 8:24 p.m.

6.9

CVSS4.0

CVE-2025-13806 - nutzam NutzBoot Transaction API EthModule.java improper authorization

A security vulnerability has been detected in nutzam NutzBoot up to 2.6.0-SNAPSHOT. This impacts an unknown function of the file nutzboot-demo/nutzboot-demo-simple/nutzboot-demo-simple-web3j/src/main/java/io/nutz/demo/simple/module/EthModule.java of the component Transaction API. The manipulation oโ€ฆ

๐Ÿ“… Published: Dec. 1, 2025, 4:02 a.m. ๐Ÿ”„ Last Modified: Feb. 24, 2026, 6:39 a.m.

6.3

CVSS4.0

CVE-2025-13805 - nutzam NutzBoot LiteRpc-Serializer HttpServletRpcEndpoint.java getInputStream deserialization

A weakness has been identified in nutzam NutzBoot up to 2.6.0-SNAPSHOT. This affects the function getInputStream of the file nutzcloud/nutzcloud-literpc/src/main/java/org/nutz/boot/starter/literpc/impl/endpoint/http/HttpServletRpcEndpoint.java of the component LiteRpc-Serializer. Executing a manipuโ€ฆ

๐Ÿ“… Published: Dec. 1, 2025, 3:32 a.m. ๐Ÿ”„ Last Modified: April 15, 2026, 12:35 a.m.
Total resulsts: 349182
Page 2871 of 34,919
ยซ previous page ยป next page
Filters