10 matches found
Jrohy-trojan-unauth-poc
Jrohy/trojan 未授权修改管理员密码 Jrohy/trojan 是一个基于 Go 开发的自动化部署 trojan 服务的开源项目，其 web 端初始化接口 /auth/register 在用户配置后未能正常关闭，导致未经授权的访问者可以直接修改管理员密码 项目地址： https://github.com/Jrohy/trojan 影响版本： v2.0.0 - v2.15.3 漏洞原理 注册路由，使用 updateUser 函数处理/auth/register请求 root@kitploit: //...
EUVD-2025-16782
Malicious code in bioql PyPI...
CVE-2025-5525
A vulnerability was found in Jrohy trojan up to 2.15.3. It has been declared as critical. This vulnerability affects the function LogChan of the file trojan/util/linux.go. The manipulation of the argument c leads to os command injection. The attack can be initiated remotely. The complexity of an...
CVE-2025-5525
A vulnerability was found in Jrohy trojan up to 2.15.3. It has been declared as critical. This vulnerability affects the function LogChan of the file trojan/util/linux.go. The manipulation of the argument c leads to os command injection. The attack can be initiated remotely. The complexity of an...
CVE-2025-5525
CVE-2025-5525 affects Jrohy trojan up to version 2.15.3. The flaw is in the LogChan function (trojan/util/linux.go) where mishandling of the argument c enables os command injection. Exploitation can be performed remotely; attack complexity is described as high, with public disclosures available. ...
CVE-2025-5525 Jrohy trojan linux.go LogChan os command injection
A vulnerability was found in Jrohy trojan up to 2.15.3. It has been declared as critical. This vulnerability affects the function LogChan of the file trojan/util/linux.go. The manipulation of the argument c leads to os command injection. The attack can be initiated remotely. The complexity of an...
CVE-2025-5525 Jrohy trojan linux.go LogChan os command injection
A vulnerability was found in Jrohy trojan up to 2.15.3. It has been declared as critical. This vulnerability affects the function LogChan of the file trojan/util/linux.go. The manipulation of the argument c leads to os command injection. The attack can be initiated remotely. The complexity of an...
CVE-2025-5525 Jrohy trojan linux.go LogChan os command injection
A vulnerability was found in Jrohy trojan up to 2.15.3. It has been declared as critical. This vulnerability affects the function LogChan of the file trojan/util/linux.go. The manipulation of the argument c leads to os command injection. The attack can be initiated remotely. The complexity of an...
PT-2025-23668 · Unknown · Jrohy Trojan
Name of the Vulnerable Software and Affected Versions: Jrohy trojan versions up to 2.15.3 Description: A critical issue affects the LogChan function in the file trojan/util/linux.go. The manipulation of the argument c leads to os command injection. This issue can be initiated remotely, but the...
