EUVD-2025-27612

Malicious code in bioql PyPI...

EUVD-2025-29576

Malicious code in bioql PyPI...

CVE-2025-44034

SQL injection vulnerability in oasystem oasys v.1.1 allows a remote attacker to execute arbitrary code via the alph parameters in src/main/Java/cn/gson/oasys/controller/address/AddrController...

CVE-2025-29592

oasys v1.1 is vulnerable to Directory Traversal in ProcedureController...

CVE-2025-29592

oasys v1.1 is vulnerable to Directory Traversal in ProcedureController...

CVE-2025-29592

The OA office automation system oasys v1.1 is vulnerable to a Directory Traversal flaw in the ProcedureController component. This vulnerability, classified as CWE-22 , allows an attacker to perform unauthorized access to files and directories on the system. The CVSS 3.1 score is 5.6 (MEDIUM) , wi...

PT-2025-37057

Name of the Vulnerable Software and Affected Versions: oasys version 1.1 Description: oasys version 1.1 is susceptible to a Directory Traversal issue within the ProcedureController. This allows potential unauthorized access to files and directories. Recommendations: At the moment, there is no...

PT-2024-33064 · Oasys · Oasys

Name of the Vulnerable Software and Affected Versions: oasys version 1.1 Description: The issue in the component /logins allows attackers to access sensitive information via a burst attack. Recommendations: For oasys version 1.1, consider restricting access to the /logins component to minimize th...