CVE-2024-30851

The codesiddhant Jasmin Ransomware v.1.0.1 web panel is vulnerable to an unauthenticated directory traversal (CWE-22) within the download_file.php component. The root cause is a lack of sanitization when passing the file GET parameter to the readfile() function, combined with a failure to execute...

CVE-2025-6095

CVE-2025-6095 affects codesiddhant Jasmin Ransomware 1.0.1, with an unauthenticated SQL injection in the /checklogin.php login handling. The vulnerability arises from improper handling of the username/password parameters, enabling remote exploitation and potential data disclosure or modification ...

CVE-2025-6096

The CVE-2025-6096 entry concerns codesiddhant Jasmin Ransomware up to version 1.0.1. The vulnerability affects an unknown function in /dashboard.php where manipulating the Search argument leads to SQL injection. It is exploitable remotely, and publicly disclosed exploits exist. Connected document...