EUVD-2025-202732

OS Command Injection vulnerability in Ruijie RG-YST AP3.01B11P280YST250F allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua...

EUVD-2025-202735

OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the restartmodules in file /usr/lib/lua/luci/controller/admin/common.lua...

CVE-2025-36936

In GetTachyonCommand of tachyonservercommon.h, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36927

In GetTachyonCommand of tachyonservercommon.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-56127

OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the getwanobj in file /usr/lib/lua/luci/controller/admin/common.lua...

CVE-2025-56107

OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the submitwifi in file /usr/lib/lua/luci/controller/admin/commonquickconfig.lua...

CVE-2025-56099

OS Command Injection vulnerability in Ruijie RG-YST AP3.01B11P280YST250F allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua...

cn.slimjoy:web-plus-job (>=1.0.0, <=1.0.2), cn.slimjoy:web-plus-starter (>=1.0.0, <=1.0.2) +53 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (>=5.0.0-beta, <=5.1.2)

tech.powerjob:powerjob-common MAVEN version =5.0.0-beta, =1.0.0, =1.0.0, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.6.1 and more Source cves: CVE-2025-14518 Source advisory: GHSA-8XQM-6FJ2-HFGF...

tech.powerjob:powerjob-client (4.3.8), tech.powerjob:powerjob-official-processors (4.3.8) +15 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.3.8)

tech.powerjob:powerjob-common MAVEN version 4.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - tech.powerjob:powerjob-client 4.3.8 - tech.powerjob:powerjob-official-processors 4.3.8 -...

cn.slimjoy:web-plus-job (>=1.0.0, <=1.0.2), cn.slimjoy:web-plus-starter (>=1.0.0, <=1.0.2) +53 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (>=5.0.0-beta, <=5.1.2)

tech.powerjob:powerjob-common MAVEN version =5.0.0-beta, =1.0.0, =1.0.0, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.6.1 and more Source cves: CVE-2025-14518 Source advisory: OSV:GHSA-8XQM-6FJ2-HFGF...

io.github.teoan:power-job-auto-core (1.0.0), io.github.teoan:power-job-auto-spring-boot-samples (1.0.0) +18 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.3.9)

tech.powerjob:powerjob-common MAVEN version 4.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - io.github.teoan:power-job-auto-core 1.0.0 - io.github.teoan:power-job-auto-spring-boot-samples 1.0.0 ...

tech.powerjob:powerjob-client (4.3.7), tech.powerjob:powerjob-official-processors (4.3.7) +15 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.3.7)

tech.powerjob:powerjob-common MAVEN version 4.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - tech.powerjob:powerjob-client 4.3.7 - tech.powerjob:powerjob-official-processors 4.3.7 -...

io.github.dudiao:powerjob-remote-smart-http (>=0.0.3, <=0.0.4), io.github.shuigedeng:taotao-cloud-starter-job-powerjob (>=2023.10, <=2024.02) +21 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.3.6)

tech.powerjob:powerjob-common MAVEN version 4.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - io.github.dudiao:powerjob-remote-smart-http =0.0.3, =2023.10, =2.5.5-m1, =2.5.5-m1, =1.0.0, =1.0.0,...

tech.powerjob:powerjob-client (4.3.1), tech.powerjob:powerjob-official-processors (4.3.1) +17 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.3.1)

tech.powerjob:powerjob-common MAVEN version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - tech.powerjob:powerjob-client 4.3.1 - tech.powerjob:powerjob-official-processors 4.3.1 -...

io.github.shuigedeng:taotao-cloud-starter-job-powerjob (2023.03), org.noear:powerjob-solon-cloud-plugin (>=2.0.0-m1, <=2.5.4) +9 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.3.0)

tech.powerjob:powerjob-common MAVEN version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - io.github.shuigedeng:taotao-cloud-starter-job-powerjob 2023.03 - org.noear:powerjob-solon-cloud-plugi...

io.github.shuigedeng:taotao-cloud-starter-job-powerjob (2023.02), tech.powerjob:powerjob-client (4.2.1) +3 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.2.1)

tech.powerjob:powerjob-common MAVEN version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - io.github.shuigedeng:taotao-cloud-starter-job-powerjob 2023.02 - tech.powerjob:powerjob-client 4.2.1 ...

tech.powerjob:powerjob-client (4.0.0), tech.powerjob:powerjob-official-processors (1.1.0) +3 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.0.0)

tech.powerjob:powerjob-common MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - tech.powerjob:powerjob-client 4.0.0 - tech.powerjob:powerjob-official-processors 1.1.0 -...

cn.slimjoy:web-plus-job (>=1.0.0, <=1.0.2), cn.slimjoy:web-plus-starter (>=1.0.0, <=1.0.2) +63 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (>=4.0.0, <=5.1.7)

tech.powerjob:powerjob-common MAVEN version =4.0.0, =1.0.0, =1.0.0, =0.0.3, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.5.1, =2.6.1 and more Source cves: CVE-2025-14518 Source advisory: SNYK:JAVA-TECHPOWERJOB-14401157...

io.github.shuigedeng:taotao-cloud-starter-job-powerjob (2023.09), tech.powerjob:powerjob-client (4.3.5) +16 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.3.5)

tech.powerjob:powerjob-common MAVEN version 4.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - io.github.shuigedeng:taotao-cloud-starter-job-powerjob 2023.09 - tech.powerjob:powerjob-client 4.3.5 ...

tech.powerjob:powerjob-client (4.3.4), tech.powerjob:powerjob-official-processors (4.3.4) +15 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.3.4)

tech.powerjob:powerjob-common MAVEN version 4.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - tech.powerjob:powerjob-client 4.3.4 - tech.powerjob:powerjob-official-processors 4.3.4 -...