EUVD-2025-10354

Malicious code in bioql PyPI...

CVE-2025-28405

The backend management system RUoYi version 4.8.0 contains a security vulnerability that allows a remote attacker to escalate privileges via the changeStatus method. As a mitigation, users of version 4.8.0 are advised to consider disabling the changeStatus method until a formal patch is released....

RuoYi 安全漏洞

RuoYi is a backend management system for individual developers of RuoYi in China. A security vulnerability exists in RuoYi v.4.8.0, which can be exploited by a remote attacker to elevate privileges via the changeStatus method...

CVE-2025-28405

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the changeStatus method...