CVE-2025-7824

Jinher OA 1.1 is affected by an XXE vulnerability in the XmlHttp.aspx file. The issue allows remote exploitation and has been publicly disclosed; per connected sources, exploitation maturity is PROOF-OF-CONCEPT and there is no information about a fix/newer version containing a patch. The risk pos...

Arbitrary File Read Vulnerability in BlueLine's New Generation Digital OA (Large and Medium Enterprises) EKP

Shenzhen BlueLine Software Co., Ltd. is a well-known large-platform OA service provider and a leading knowledge management solution provider in China, which is a national high-tech enterprise specializing in knowledge-based consulting, software R&D, implementation and technical services for...

The likelihood of collaborative oa \app\oa\block\control.php SQL injection

No description provided by source...