CVE-2025-45615

Incorrect access control in the /admin/ API of yaoqishan v0.0.1-SNAPSHOT allows attackers to gain access to Admin rights via a crafted request...

CVE-2025-45615

The yaoqishan (DemonQishan) video management system, specifically version v0.0.1-SNAPSHOT , is vulnerable to an incorrect access control flaw in the /admin/ API endpoint. An attacker can exploit this by sending a crafted request to gain Admin rights . As a temporary mitigation, users are advised ...