CVE-2025-60801

jshERP up to commit fbda24da was discovered to contain an unauthenticated remote code execution RCE vulnerability via the jsherp function...

CVE-2025-60801

jshERP up to commit fbda24da was discovered to contain an unauthenticated remote code execution RCE vulnerability via the jsherp function...

CVE-2025-60801

jshERP up to commit fbda24da was discovered to contain an unauthenticated remote code execution RCE vulnerability via the jsherp function...

CVE-2025-60801

The CVE-2025-60801 entry concerns jshERP up to commit fbda24da, with an unauthenticated remote code execution (RCE) via the jsh_erp function. The vulnerability is exploitable over network without authentication, with CVSSv3.1 base metrics indicating high severity (8.2) and impacts to confidential...

CVE-2025-60801

jshERP up to commit fbda24da was discovered to contain an unauthenticated remote code execution RCE vulnerability via the jsherp function...

jshERP 安全漏洞

jshERP Huaxia ERP is a homegrown ERP system by the individual developer of Ji Sheng Hua in China. A security vulnerability exists in jshERP fbda24da and prior versions, which stems from an unauthenticated remote code execution vulnerability in the jsherp function...

PT-2025-43650

Name of the Vulnerable Software and Affected Versions jshERP versions prior to commit fbda24da Description The software contains an unauthenticated remote code execution RCE issue via the jsh erp function. This allows for the execution of arbitrary code without authentication. Recommendations...

EUVD-2025-22275

Malicious code in bioql PyPI...

EUVD-2024-21426

Malicious code in bioql PyPI...

EUVD-2025-25417

Malicious code in bioql PyPI...

EUVD-2023-52922

Malicious code in bioql PyPI...

EUVD-2025-21299

Malicious code in bioql PyPI...

EUVD-2024-21429

Malicious code in bioql PyPI...

EUVD-2025-25427

Malicious code in bioql PyPI...

EUVD-2025-22274

Malicious code in bioql PyPI...

EUVD-2025-24135

Malicious code in bioql PyPI...

EUVD-2025-25426

Malicious code in bioql PyPI...

EUVD-2025-24138

Malicious code in bioql PyPI...

CVE-2025-55367

Incorrect access control in the component \controller\SupplierController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier status under any account...

CVE-2025-55371

Incorrect access control in the component /controller/PersonController.java of jshERP v3.5 allows unauthorized attackers to obtain all the information of the handler by executing the getAllList method...