Results
90,429· Page 276/1809JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delete handler
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController edit handler th
JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to re
JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to de
JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to de
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController deleteById handler that al
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController updateById handler that al
Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 b
Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions.
Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions.
Unauthenticated Cross Site Scripting (XSS) in Educavo <= 3.4.2 versions.
Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions.
Unauthenticated Cross Site Scripting (XSS) in LMS <= 8.3 versions.
Unauthenticated PHP Object Injection in Jacqueline <= 2.22 versions.
Subscriber Arbitrary File Deletion in FoodBakery <= 4.6 versions.
Unauthenticated PHP Object Injection in Alliance <= 3.11 versions.
Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions.
Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.
Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions.
Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.
Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions.
Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions.
Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.
Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.
Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.
Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions.
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Produc
Unauthenticated Arbitrary Content Deletion in Forminator <= 1.57.3 versions.
Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.
Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions.
Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.
Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.
Unauthenticated PHP Object Injection in Invetex <= 2.18 versions.
Unauthenticated PHP Object Injection in Law Office <= 3.20 versions.
Unauthenticated Broken Access Control in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.
Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions.
Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.
Unauthenticated Content Injection in Boutique <= 2.3.3 versions.
Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.
Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions.
Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.
Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions.
Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.
Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions.
Unauthenticated PHP Object Injection in WineShop <= 3.20 versions.
Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions.
Unauthenticated PHP Object Injection in Juno <= 2.25 versions.
Test your stack for 2026issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.