CVE-2025-2727 H3C Magic NX30 Pro HTTP POST Request getNetworkStatus command injection

A vulnerability, which was classified as critical, was found in H3C Magic NX30 Pro up to V100R007. This affects an unknown part of the file /api/wizard/getNetworkStatus of the component HTTP POST Request Handler. The manipulation leads to command injection. Access to the local network is required...

CVE-2025-2727 H3C Magic NX30 Pro HTTP POST Request getNetworkStatus command injection

A vulnerability, which was classified as critical, was found in H3C Magic NX30 Pro up to V100R007. This affects an unknown part of the file /api/wizard/getNetworkStatus of the component HTTP POST Request Handler. The manipulation leads to command injection. Access to the local network is required...

CVE-2025-2727

The CVE-2025-2727 case affects H3C Magic NX30 Pro up to version V100R007. The vulnerability resides in the HTTP POST Request Handler’s /api/wizard/getNetworkStatus function, where an injection flaw in the targeted API endpoint enables command injection. An attacker within local network access can...

Dolphin Pro 7.4.2 SQL Injection

Dolphin Pro version 7.4.2 suffers from a remote SQL injection vulnerability. Exploit Title: SQL Injection in Admin Functionality - dolphin.prov7.4.2 Date: 03/2025 Exploit Author: Andrey Stoykov Version: 7.4.2 Date: 03/2025 Tested on: Debian 12 Blog:...

CVE-2025-2744: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability, which was classified as critical, was found in zhijiantianya ruoyi-vue-pro 2.4.1. Affected is an unknown function of the file /admin-api/mp/material/upload-news-image of the component Material Upload Interface. The manipulation of the argument File leads to path traversal. It is...

CVE-2025-2743: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability, which was classified as problematic, has been found in zhijiantianya ruoyi-vue-pro 2.4.1. This issue affects some unknown processing of the file /admin-api/mp/material/upload-temporary of the component Material Upload Interface. The manipulation of the argument File leads to path...

CVE-2025-2742: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability classified as critical was found in zhijiantianya ruoyi-vue-pro 2.4.1. This vulnerability affects unknown code of the file /admin-api/mp/material/upload-permanent of the component Material Upload Interface. The manipulation of the argument File leads to path traversal. The attack...

CVE-2025-2732: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/wizard/getWifiNeighbour of the component HTTP POST Request Handler. The...

CVE-2025-2728: Improper Neutralization of Special Elements used in a Command

A vulnerability has been found in H3C Magic NX30 Pro and Magic NX400 up to V100R014 and classified as critical. This vulnerability affects unknown code of the file /api/wizard/getNetworkConf. The manipulation leads to command injection. The attack needs to be approached within the local network. ...

CVE-2025-2727: Improper Neutralization of Special Elements used in a Command

A vulnerability, which was classified as critical, was found in H3C Magic NX30 Pro up to V100R007. This affects an unknown part of the file /api/wizard/getNetworkStatus of the component HTTP POST Request Handler. The manipulation leads to command injection. Access to the local network is required...

CVE-2025-2726: Improper Neutralization of Special Elements used in a Command

A vulnerability, which was classified as critical, has been found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. Affected by this issue is some unknown functionality of the file /api/esps of the component HTTP POST Request Handler. The manipulation...

H3C’s various products have vulnerabilities

H3C Magic NX30 Pro and others are products of China's Xinhua San H3C.H3C Magic NX30 Pro is a home router that supports WiFi6 3000M rate.H3C Magic NX15 is a router.H3C Magic NX400 is a router. An injection vulnerability exists in several H3C products. The vulnerability stems from a command injecti...

H3C Magic NX30 Pro and H3C Magic NX400 have injection vulnerabilities

H3C Magic NX30 Pro and H3C Magic NX400 are both products of China's Xinhua San H3C.H3C Magic NX30 Pro is a home router that supports WiFi6 3000M rate. It is used for home network coverage to provide high-speed and stable wireless network.H3C Magic NX400 is a router... An injection vulnerability...

H3C's various products have security vulnerabilities

H3C Magic NX30 Pro and others are products of China's Xinhua San H3C.H3C Magic NX30 Pro is a home router that supports WiFi6 3000M rate.H3C Magic NX15 is a router.H3C Magic NX400 is a router. A security vulnerability exists in several H3C products. The vulnerability stems from a command injection...

CVE-2025-2729: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014 and classified as critical. This issue affects some unknown processing of the file /api/wizard/networkSetup of the component HTTP POST Request Handler. The manipulation leads to...

PT-2025-12769

Name of the Vulnerable Software and Affected Versions zhijiantianya ruoyi-vue-pro version 2.4.1 Description A critical issue was found in the Material Upload Interface component, specifically affecting the /admin-api/mp/material/upload-permanent file. The manipulation of the File argument leads t...

PT-2025-12771 · Unknown · Ruoyi-Vue-Pro

Name of the Vulnerable Software and Affected Versions: zhijiantianya ruoyi-vue-pro version 2.4.1 Description: A critical issue was found in the Material Upload Interface component, specifically affecting an unknown function of the file /admin-api/mp/material/upload-news-image. The manipulation of...

ruoyi-vue-pro path traversal vulnerability

ruoyi-vue-pro is the Taro Road source code zhijiantianya open source an optimized refactored efficient backend management system framework for the development of enterprise backend , SaaS platform , WeChat small program backend and so on. ruoyi-vue-pro 2.4.1 version of a security vulnerability ,...

H3C Magic NX30 Pro has an injection vulnerability

H3C Magic NX30 Pro is a home router supporting WiFi6 3000M rate from China's Xinhua San H3C. It is used for home network coverage to provide high-speed and stable wireless network. An injection vulnerability exists in H3C Magic NX30 Pro V100R007 and earlier versions, which originates from a comma...

ruoyi-vue-pro path traversal vulnerability

ruoyi-vue-pro is Taro source code zhijiantianya open source an optimized and refactored efficient backend management system framework for the development of enterprise backend , SaaS platform , WeChat small program backend and so on. ruoyi-vue-pro 2.4.1 version of the path traversal vulnerability...