https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-57213.htmlhttps://patchthecve.com/cve/CVE-2025-57213.htmlWed, 17 Jun 2026 09:42:56 +0000HIGH 7.5: Incorrect access control in the component orderService.queryObject of platform v1.0.0 allows attackers to access sensitive information via a crafted request.https://patchthecve.com/cve/CVE-2025-57212.htmlhttps://patchthecve.com/cve/CVE-2025-57212.htmlWed, 17 Jun 2026 09:42:56 +0000HIGH 7.5: Incorrect access control in the component ApiOrderService.java of platform v1.0.0 allows attackers to access sensitive information via a crafted request.https://patchthecve.com/cve/CVE-2025-57210.htmlhttps://patchthecve.com/cve/CVE-2025-57210.htmlWed, 17 Jun 2026 09:42:56 +0000HIGH 7.5: Incorrect access control in the component ApiPayController.java of platform v1.0.0 allows attackers to access sensitive information via unspecified vectors.https://patchthecve.com/cve/CVE-2025-10822.htmlhttps://patchthecve.com/cve/CVE-2025-10822.htmlSun, 11 Oct 2026 20:10:00 +0000MEDIUM 4.3: A vulnerability has been found in fuyang_lipengjun platform 1.0. The impacted element is the function SysSmsLogController of the file /sys/smslog/queryAll. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit has been disclosed to the public and mayhttps://patchthecve.com/cve/CVE-2025-10821.htmlhttps://patchthecve.com/cve/CVE-2025-10821.htmlSun, 11 Oct 2026 20:10:00 +0000MEDIUM 4.3: A flaw has been found in fuyang_lipengjun platform 1.0. The affected element is the function TopicCategoryController of the file /topiccategory/queryAll. This manipulation causes improper authorization. The attack is possible to be carried out remotely. The exploit has been published and may be usedhttps://patchthecve.com/cve/CVE-2025-10820.htmlhttps://patchthecve.com/cve/CVE-2025-10820.htmlSun, 11 Oct 2026 20:10:00 +0000MEDIUM 4.3: A vulnerability was detected in fuyang_lipengjun platform 1.0. Impacted is the function TopicController of the file /topic/queryAll. The manipulation results in improper authorization. The attack can be executed remotely. The exploit is now public and may be used.https://patchthecve.com/cve/CVE-2025-10819.htmlhttps://patchthecve.com/cve/CVE-2025-10819.htmlSun, 11 Oct 2026 20:10:00 +0000MEDIUM 4.3: A security vulnerability has been detected in fuyang_lipengjun platform 1.0. This issue affects the function UserCouponController of the file /usercoupon/queryAll. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed publiclyhttps://patchthecve.com/cve/CVE-2025-10676.htmlhttps://patchthecve.com/cve/CVE-2025-10676.htmlWed, 17 Jun 2026 08:28:45 +0000MEDIUM 4.3: A weakness has been identified in fuyang_lipengjun platform 1.0. Affected is the function BrandController of the file /brand/queryAll. Executing manipulation can lead to improper authorization. The attack can be executed remotely. The exploit has been made available to the public and could be exploihttps://patchthecve.com/cve/CVE-2025-10675.htmlhttps://patchthecve.com/cve/CVE-2025-10675.htmlWed, 17 Jun 2026 08:28:44 +0000MEDIUM 4.3: A security flaw has been discovered in fuyang_lipengjun platform 1.0. This impacts the function AttributeController of the file /attribute/queryAll. Performing manipulation results in improper authorization. Remote exploitation of the attack is possible. The exploit has been released to the public ahttps://patchthecve.com/cve/CVE-2025-10674.htmlhttps://patchthecve.com/cve/CVE-2025-10674.htmlWed, 17 Jun 2026 08:28:44 +0000MEDIUM 4.3: A vulnerability was identified in fuyang_lipengjun platform 1.0. This affects the function AttributeCategoryController of the file /attributecategory/queryAll. Such manipulation leads to improper authorization. The attack may be launched remotely. The exploit is publicly available and might be used.https://patchthecve.com/cve/CVE-2025-10086.htmlhttps://patchthecve.com/cve/CVE-2025-10086.htmlWed, 17 Jun 2026 08:27:39 +0000MEDIUM 6.3: A weakness has been identified in fuyang_lipengjun platform 1.0.0. This issue affects the function queryAll of the file /adposition/queryAll of the component AdPositionController. This manipulation causes improper authorization. The attack can be initiated remotely. The exploit has been made availabhttps://patchthecve.com/cve/CVE-2025-9936.htmlhttps://patchthecve.com/cve/CVE-2025-9936.htmlWed, 17 Jun 2026 10:10:06 +0000MEDIUM 4.3: A vulnerability was identified in fuyang_lipengjun platform 1.0.0. This issue affects the function AdController of the file /ad/queryAll. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.https://patchthecve.com/cve/CVE-2025-7936.htmlhttps://patchthecve.com/cve/CVE-2025-7936.htmlWed, 17 Jun 2026 10:06:00 +0000MEDIUM 6.3: A vulnerability has been found in fuyang_lipengjun platform up to ca9aceff6902feb7b0b6bf510842aea88430796a and classified as critical. Affected by this vulnerability is the function queryPage of the file com/platform/controller/ScheduleJobLogController.java. The manipulation of the argument beanNamehttps://patchthecve.com/cve/CVE-2025-7935.htmlhttps://patchthecve.com/cve/CVE-2025-7935.htmlWed, 17 Jun 2026 10:06:00 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in fuyang_lipengjun platform up to ca9aceff6902feb7b0b6bf510842aea88430796a. Affected is the function SysLogController of the file platform-admin/src/main/java/com/platform/controller/SysLogController.java. The manipulation of the argumenthttps://patchthecve.com/cve/CVE-2025-7934.htmlhttps://patchthecve.com/cve/CVE-2025-7934.htmlWed, 17 Jun 2026 10:05:59 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in fuyang_lipengjun platform up to ca9aceff6902feb7b0b6bf510842aea88430796a. This issue affects the function queryPage of the file platform-schedule/src/main/java/com/platform/controller/ScheduleJobController.java. The manipulation ofhttps://patchthecve.com/cve/CVE-2025-1683.htmlhttps://patchthecve.com/cve/CVE-2025-1683.htmlWed, 17 Jun 2026 08:39:35 +0000HIGH 7.8: Improper link resolution before file access in the Nomad module of the 1E Client, in versions prior to 25.3, enables an attacker with local unprivileged access on a Windows system to delete arbitrary files on the device by exploiting symbolic links.https://patchthecve.com/cve/CVE-2024-7211.htmlhttps://patchthecve.com/cve/CVE-2024-7211.htmlWed, 17 Jun 2026 08:19:35 +0000MEDIUM 4.7: The 1E Platform's component utilized the third-party Duende Identity Server, which suffered from an open redirect vulnerability, permitting an attacker to control the redirection path of end users. Note: 1E Platform's component utilizing the third-party Duende Identity Server has been updated with