PT-2026-69778

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the dpll msg add pin ref sync function when a dpll pin is shared across multiple dpll device instances during the unregistration process, such as...

CVE-2025-67344

jshERP v3.5 and earlier is affected by a stored Cross Site Scripting XSS vulnerability via the /msg/add endpoint...

EUVD-2025-203100

jshERP v3.5 and earlier is affected by a stored Cross Site Scripting XSS vulnerability via the /msg/add endpoint...

CVE-2025-67344

jshERP v3.5 and earlier is affected by a stored Cross Site Scripting XSS vulnerability via the /msg/add endpoint...

CVE-2025-67344: Improper Neutralization of Input During Web Page Generation

jshERP v3.5 and earlier is affected by a stored Cross Site Scripting XSS vulnerability via the /msg/add endpoint...

CVE-2025-67344

The jshERP (Huaxia ERP) system, versions 3.5 and earlier , is vulnerable to a stored Cross-Site Scripting (XSS) vulnerability. The root cause is the improper neutralization of input during web page generation within the /msg/add API endpoint. An attacker can inject malicious scripts that are stor...