Approved changes feed: RSS · Atom
cpe:2.3:a:wwwlike:vlife:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Wwwlike (17bdf85d-1e8d-58f3-9532-1ee0540f917c) |
|---|---|
| Product | Vlife (35d42726-06d1-5192-a59e-ee4e7ae50a2a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-110612 |
vulnerable | 2026-11-03 10:16:00.925455 |
vlife through 2.0.1 Authentication Bypass via Hardcoded JWT Secret in TokenUtil
CRITICAL (9.8)
vlife through 2.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs using the hardcoded HS256 signing key in TokenUtil. Attackers can sign a token with superUser=true and arbitrary groupIds claims to gain super administrator access to any URL on vlife instances.
Published: 2026-10-14T14:16:52.666Z
Updated: 2026-10-14T18:04:15.576Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13266 |
vulnerable | 2026-06-08 07:04:31.882318 |
wwwlike vlife VLifeApi SysFileApi.java create path traversal
MEDIUM (5.3)
A security vulnerability has been detected in wwwlike vlife up to 2.0.1. This issue affects the function create of the file vlife-base/src/main/java/cn/wwwlike/sys/api/SysFileApi.java of the component VLifeApi. Such manipulation of the argument fileName leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Published: 2025-11-17T06:02:06.421Z
Updated: 2025-11-17T16:29:30.390Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.