Sud0Why

**Name of the Vulnerable Software and Affected Versions** SpringBlade versions 2.7.3 through 4.9.9 **Description** Authenticated attackers can escalate privileges to create system administrator accounts by sending crafted POST requests to an unprotected internal Feign user-creation endpoint exposed via @RestController that lacks authorization checks. The issue stems from a gateway authentication filter that validates JWT (JSON Web Token) parsing but fails to verify user roles or caller identity. Furthermore, a hardcoded JWT signing key embedded in publicly available JARs allows attackers to forge tokens, enabling cross-tenant data pollution and persistent backdoor access. **Recommendations** Update SpringBlade to version 5.0.0 or later.

**Name of the Vulnerable Software and Affected Versions** manga-image-translator versions beta-0.3 and prior **Description** The software contains an unsafe deserialization issue that could allow unauthenticated remote code execution. The application’s API endpoints, `/simple execute/{method}` and `/execute/{method}`, utilize `pickle.loads()` to deserialize request bodies without proper validation. An intended nonce-based authorization check is ineffective because the nonce defaults to an empty string, bypassing the security measure. This allows attackers to execute arbitrary code within the server environment by submitting a specially crafted pickle payload. **Recommendations** Versions prior to beta-0.3: At the moment, there is no information about a newer version that contains a fix for this vulnerability.