CVE-2025-56769

An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary method invocation and potentially remote code execution RCE via the QLExpressEngine class...

PT-2025-12243 · Lunary · Lunary

Name of the Vulnerable Software and Affected Versions: lunary-ai/lunary versions be54057 and later Description: The issue allows users to upload and execute arbitrary regular expressions on the server, potentially leading to a Denial of Service DoS condition due to excessive resource consumption...

SCIMono Injection Vulnerability

Parvan Dobrev scimono is Parvan Dobrev an open source application . It provides a server-side and a client-side. An injection vulnerability exists in SCIMono, which could allow an attacker to inject and execute java expressions, thereby compromising system availability and integrity. The followin...