PT-2026-35825

Name of the Vulnerable Software and Affected Versions Xuxueli xxl-job versions prior to 3.3.3 Description A server-side request forgery SSRF exists in the 'trigger' endpoint. The issue resides in the triggerJob function within the file...

DataX-Web Access Control Vulnerability

DataX-Web is a distributed data synchronization tool developed on top of DataX by WeiYe's personal developer. An access control error vulnerability exists in DataX-Web 2.1.2 and earlier versions, which stems from incorrect operation of the function remove/update/pause/start/triggerJob in the...