CVE-2025-28410

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the cancelAuthUserAll method does not properly validate whether the requesting user has administrative privileges...

CVE-2025-28401

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the menuId parameter...

CVE-2022-39997

The Teldat RS123 and RS123w routers are vulnerable to a weak password issue (CWE-521), where they ship with hardcoded default credentials of root:root. This allows unauthenticated remote attackers to gain full administrative access via services such as Telnet, SSH, HTTP, and FTP . Proof-of-concep...