EUVD-2025-6695

Malicious code in bioql PyPI...

CVE-2025-25589

An XML external entity XXE injection vulnerability in the component /weixin/aes/XMLParse.java of yimioa before v2024.07.04 allows attackers to execute arbitrary code via supplying a crafted XML file...

CVE-2025-25586

yimioa before v2024.07.04 was discovered to contain an information disclosure vulnerability via the component /resources/application.yml...

CVE-2025-25580

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the listNameBySql method at /xml/UserMapper.xml...

CVE-2025-25590

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the component /mapper/xml/AddressDao.xml...

CVE-2025-25586

yimioa before v2024.07.04 was discovered to contain an information disclosure vulnerability via the component /resources/application.yml...

CVE-2025-25590

CVE-2025-25590 affects yimioa prior to v2024.07.04, with a SQL injection vulnerability in the component /mapper/xml/AddressDao.xml. The available data confirms the issue and its root cause (SQL injection in AddressDao.xml) without detailing a fixed version or patch. CVSS 3.1 base score is 6.1 (Me...

CVE-2025-25580

CVE-2025-25580 affects yimioa prior to v2024.07.04 and is a SQL injection vulnerability exposed via the listNameBySql() method in the /xml/UserMapper.xml. The entry indicates a local-privilege context with user interaction required and high confidentiality impact, but no exploit details or public...

CVE-2025-25589

An XML external entity XXE injection vulnerability in the component /weixin/aes/XMLParse.java of yimioa before v2024.07.04 allows attackers to execute arbitrary code via supplying a crafted XML file...

CVE-2025-25580

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the listNameBySql method at /xml/UserMapper.xml...

CVE-2025-25586

yimioa before v2024.07.04 was discovered to contain an information disclosure vulnerability via the component /resources/application.yml...

CVE-2025-25582

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList method at /xml/OaNoticeMapper.xml...