CVE-2025-11912: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. Affected is the function Query of the file /DeviceState.do?Action=Query. This manipulation of the argument orderField causes sql injection. The attack can be initiated remotely. The exploit has been published and may be...

PT-2025-42647

Name of the Vulnerable Software and Affected Versions Shenzhen Ruiming Technology Streamax Crocus version 1.3.40 Description A flaw exists in the Streamax Crocus software that allows for SQL injection. The issue is located in the Query function of the /DeviceState.do?Action=Query file. Manipulati...