8 matches found
EUVD-2025-6188
Malicious code in bioql PyPI...
EUVD-2025-26232
Malicious code in bioql PyPI...
CVE-2025-44033
SQL injection vulnerability in oasystem oasys v.1.1 allows a remote attacker to execute arbitrary code via the allDirector method declaration in src/main/java/cn/gson/oasys/mappers/AddressMapper.java...
CVE-2025-44033
SQL injection vulnerability in oasystem oasys v.1.1 allows a remote attacker to execute arbitrary code via the allDirector method declaration in src/main/java/cn/gson/oasys/mappers/AddressMapper.java...
oasys 安全漏洞
oasys is an OA automated office system by the personal developer of Programmer Second Senior Brother Programmer Second Senior Brother. A security vulnerability exists in oasys version 1.1, which originates from an SQL injection in the allDirector method in...
CVE-2025-44033
SQL injection vulnerability in oasystem oasys v.1.1 allows a remote attacker to execute arbitrary code via the allDirector method declaration in src/main/java/cn/gson/oasys/mappers/AddressMapper.java...
CVE-2025-1958
A vulnerability, which was classified as critical, has been found in aaluoxiang oasystem 1.0. This issue affects some unknown processing of the file src/main/resources/mappers/address-mapper.xml. The manipulation of the argument outtype leads to sql injection. The attack may be initiated remotely...
PT-2024-17769 · Arctic Security · Arctic Hub
Name of the Vulnerable Software and Affected Versions: Arctic Security's Arctic Hub versions 3.0.1764 through 5.6.1877 Description: A Server-Side Request Forgery issue exists in the URL Mapper of Arctic Security's Arctic Hub, allowing an unauthenticated remote attacker to exfiltrate and modify...