CVE-2025-54790

CVE-2025-54790 affects the Files module (HumHub cfiles) in versions 0.16.9 and earlier. The root cause is missing input handling to block exploitation of backend SQL queries, potentially enabling unauthorized data access to files in spaces and user profiles. The issue is fixed in version 0.16.10....

CMCC Tietong Suzhou Branch Yu Routing Qi Has Logic Flaw Vulnerability

The main business of CMRT Limited is communication technology, information system development, consulting services and construction project management. A logic flaw vulnerability exists in Yu Routing Qi of CMCC Suzhou Branch, which can be exploited by attackers to gain unauthorized access to the...