85 matches found
White-Jotter 安全漏洞
White-Jotter is a front-end and back-end separation project developed by Antabot individual developers using Vue+Spring Boot, with a full set of development tutorials. White-Jotter 9bcadc and earlier versions have a security vulnerability that originates in the /api/aaa;/... /register component h...
EUVD-2025-35863
Antabot White-Jotter up to commit 9bcadc was discovered to contain an unauthenticated remote code execution RCE vulnerability via the component /api/aaa;/../register...
CVE-2025-60803
Antabot White-Jotter up to commit 9bcadc was discovered to contain an unauthenticated remote code execution RCE vulnerability via the component /api/aaa;/../register...
CVE-2025-60803
Antabot White-Jotter up to commit 9bcadc was discovered to contain an unauthenticated remote code execution RCE vulnerability via the component /api/aaa;/../register...
CVE-2025-60803
Antabot White-Jotter up to commit 9bcadc was discovered to contain an unauthenticated remote code execution RCE vulnerability via the component /api/aaa;/../register...
PT-2025-43660
Name of the Vulnerable Software and Affected Versions Antabot White-Jotter versions prior to commit 9bcadc Description The software contains an unauthenticated remote code execution RCE issue. The issue is present via the /api/aaa;/../register component. The vulnerability allows for the execution...
CVE-2025-60803
The Antabot White-Jotter project (a Vue+Spring Boot project) is vulnerable to unauthenticated remote code execution (RCE) in versions prior to commit 9bcadc . The root cause is an improper neutralization of special elements used in an OS command (OS Command Injection) located in the /api/aaa;/../...
CVE-2025-60803
Antabot White-Jotter up to commit 9bcadc was discovered to contain an unauthenticated remote code execution RCE vulnerability via the component /api/aaa;/../register...
CVE-2025-60803: Improper Neutralization of Special Elements used in an OS Command
Antabot White-Jotter up to commit 9bcadc was discovered to contain an unauthenticated remote code execution RCE vulnerability via the component /api/aaa;/../register...
EUVD-2023-33176
Malicious code in bioql PyPI...
EUVD-2025-4488
Malicious code in bioql PyPI...
EUVD-2024-51288
Malicious code in bioql PyPI...
EUVD-2024-51284
Malicious code in bioql PyPI...
EUVD-2025-23976
Malicious code in bioql PyPI...
EUVD-2024-51285
Malicious code in bioql PyPI...
EUVD-2024-51287
Malicious code in bioql PyPI...
CVE-2025-8708
A vulnerability was found in Antabot White-Jotter 0.22. It has been declared as critical. This vulnerability affects the function CookieRememberMeManager of the file ShiroConfiguration.java of the component com.gm.wj.config.ShiroConfiguration. The manipulation with the input EVANNIGHTLYWAOU leads...
CVE-2025-8708
A vulnerability was found in Antabot White-Jotter 0.22. It has been declared as critical. This vulnerability affects the function CookieRememberMeManager of the file ShiroConfiguration.java of the component com.gm.wj.config.ShiroConfiguration. The manipulation with the input EVANNIGHTLYWAOU leads...
CVE-2025-8708 Antabot White-Jotter com.gm.wj.config.ShiroConfiguration ShiroConfiguration.java CookieRememberMeManager deserialization
A vulnerability was found in Antabot White-Jotter 0.22. It has been declared as critical. This vulnerability affects the function CookieRememberMeManager of the file ShiroConfiguration.java of the component com.gm.wj.config.ShiroConfiguration. The manipulation with the input EVANNIGHTLYWAOU leads...
CVE-2025-8708 Antabot White-Jotter com.gm.wj.config.ShiroConfiguration ShiroConfiguration.java CookieRememberMeManager deserialization
A vulnerability was found in Antabot White-Jotter 0.22. It has been declared as critical. This vulnerability affects the function CookieRememberMeManager of the file ShiroConfiguration.java of the component com.gm.wj.config.ShiroConfiguration. The manipulation with the input EVANNIGHTLYWAOU leads...