Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: baowzh Component: Hfly Clear all filters
TI-2025-13265 CVE-2025-14522 · GHSA-chw2-7jr9-47ch

baowzh hfly upload_json.php unrestricted upload

Priority LOW 24

A vulnerability was detected in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0031 Published 2025-12-11 No fix listed CWE-284
TI-2025-13264 CVE-2025-14521 · GHSA-9pfg-qm2g-m5hh

baowzh hfly download path traversal

Priority LOW 25

A security vulnerability has been detected in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00586 Published 2025-12-11 No fix listed CWE-22
TI-2025-13263 CVE-2025-14520 · GHSA-94cp-45wv-rcxh

baowzh hfly delfile path traversal

Priority LOW 25

A weakness has been identified in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00639 Published 2025-12-11 No fix listed CWE-22
TI-2025-13262 CVE-2025-14519 · GHSA-mv84-v97v-mj5f

baowzh hfly advtext add cross site scripting

Priority MEDIUM 56

A security flaw has been discovered in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00264 Published 2025-12-11 No fix listed CWE-79