Lucene search
+L

9 matches found

RedhatCVE
RedhatCVE
•added 2026/01/19 2:19 a.m.•16 views

CVE-2026-1050

A flaw has been found in risesoft-y9 Digital-Infrastructure up to 9.6.7. This affects an unknown function of the file source-code/src/main/java/net/risesoft/util/Y9PlatformUtil.java of the component REST Authenticate Endpoint. Executing a manipulation can lead to sql injection. The attack can be...

7.5CVSS6.9AI score0.00402EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2026/01/17 6:30 p.m.•17 views

risesoft-y9 Digital-Infrastructure has a SQL injection vulnerability

A flaw has been found in risesoft-y9 Digital-Infrastructure up to 9.6.7. This affects an unknown function of the file source-code/src/main/java/net/risesoft/util/Y9PlatformUtil.java of the component REST Authenticate Endpoint. Executing a manipulation can lead to sql injection. The attack can be...

7.5CVSS6.6AI score0.00402EPSS
SaveExploits0References6Affected Software1
Snyk
Snyk
•added 2026/01/17 6:30 p.m.•15 views

Injection

Overview Affected versions of this package are vulnerable to Injection via the REST Authenticate Endpoint in the Y9PlatformUtil.java file. An attacker can access, modify, or disrupt sensitive data by sending specially crafted requests to the affected endpoint. Remediation There is no fixed versio...

7.5CVSS5.6AI score0.00402EPSS
SaveExploits0References2
NVD
NVD
•added 2026/01/17 6:15 p.m.•14 views

CVE-2026-1050

A flaw has been found in risesoft-y9 Digital-Infrastructure up to 9.6.7. This affects an unknown function of the file source-code/src/main/java/net/risesoft/util/Y9PlatformUtil.java of the component REST Authenticate Endpoint. Executing a manipulation can lead to sql injection. The attack can be...

7.5CVSS0.00402EPSS
SaveExploits0References6
CVE
CVE
•added 2026/01/17 6:02 p.m.•34 views

CVE-2026-1050

CVE-2026-1050 concerns risesoft-y9 Digital-Infrastructure up to 9.6.7. The vulnerability is in the REST Authenticate Endpoint, specifically in Y9PlatformUtil.java, where an attacker can trigger SQL injection via remotely crafted requests. Multiple sources (NVD, Red Hat, circl, OSV, GHSA, Snyk) co...

7.5CVSS6.6AI score0.00402EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/01/17 6:02 p.m.•16 views

EUVD-2026-3133

A flaw has been found in risesoft-y9 Digital-Infrastructure up to 9.6.7. This affects an unknown function of the file source-code/src/main/java/net/risesoft/util/Y9PlatformUtil.java of the component REST Authenticate Endpoint. Executing a manipulation can lead to sql injection. The attack can be...

7.5CVSS6.3AI score0.00402EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/17 12:00 a.m.•1 views

CVE-2026-1050: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in risesoft-y9 Digital-Infrastructure up to 9.6.7. This affects an unknown function of the file source-code/src/main/java/net/risesoft/util/Y9PlatformUtil.java of the component REST Authenticate Endpoint. Executing a manipulation can lead to sql injection. The attack can be...

7.5CVSS6.7AI score0.00402EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/17 12:00 a.m.•16 views

PT-2026-3366

Name of the Vulnerable Software and Affected Versions risesoft-y9 Digital-Infrastructure versions up to 9.6.7 Description A flaw exists in risesoft-y9 Digital-Infrastructure up to version 9.6.7. The issue affects an unknown function within the file...

7.5CVSS7AI score0.00402EPSS
SaveExploits0References13
GithubExploit
GithubExploit
•added 2025/04/09 8:47 p.m.•106 views

Exploit for CVE-2025-492030

CVE-2025-492030 Security Advisory: CVE-2025-492030 Overv...

7.7AI score
SaveExploits0
Rows per page
Query Builder