EUVD-2025-14495

Malicious code in bioql PyPI...

PT-2025-34652 · Unknown · Rebuild 3.7.7

Name of the Vulnerable Software and Affected Versions: Rebuild version 3.7.7 Description: An incorrect access control issue exists in the prehandle function. This allows attackers to bypass authentication by sending a crafted GET request to the /commons/ip-location API endpoint. Recommendations:...

CVE-2024-46412

The Rebuild enterprise management system (version v3.7.7 ) is susceptible to an incorrect access control vulnerability within its prehandle function. This flaw allows an attacker to bypass authentication by sending a specially crafted GET request to the /commons/ip-location API endpoint. To remed...

CVE-2024-25294

An SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the FileDownloader.java, proxyDownload,URL parameters...

CVE-2023-1610

A vulnerability, which was classified as critical, has been found in Rebuild up to 3.2.3. Affected by this issue is some unknown functionality of the file /project/tasks/list. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the publi...

CVE-2025-28056

rebuild v3.9.0 through v3.9.3 has a SQL injection vulnerability in /admin/admin-cli/exec component...

CVE-2025-28056

rebuild v3.9.0 through v3.9.3 has a SQL injection vulnerability in /admin/admin-cli/exec component...

CVE-2025-28056

The enterprise management system Rebuild (versions v3.9.0 through v3.9.3 ) contains a SQL injection vulnerability within the /admin/admin-cli/exec component. This vulnerability allows for improper neutralization of special elements used in SQL commands. While no specific patch version is currentl...

CVE-2025-28056

rebuild v3.9.0 through v3.9.3 has a SQL injection vulnerability in /admin/admin-cli/exec component...

CVE-2024-12995 ruifang-tech Rebuild Project Tasks Section tasks cross site scripting

A vulnerability classified as problematic has been found in ruifang-tech Rebuild 3.8.6. This affects an unknown part of the file /project/050-9000000000000001/tasks of the component Project Tasks Section. The manipulation of the argument description leads to cross site scripting. It is possible t...

CVE-2024-12664

A vulnerability, which was classified as problematic, has been found in ruifang-tech Rebuild 3.8.5. This issue affects some unknown processing of the component Project Task Comment Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

PT-2023-19762 · Rebuild · Rebuild

Name of the Vulnerable Software and Affected Versions: Rebuild version 3.2 Description: A vulnerability has been found and classified as problematic, affecting unknown code and leading to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the publi...