CVE-2024-55215

CVE-2024-55215 affects trojan versions 2.0.0 through 2.15.3. A remote attacker can escalate privileges via the initialization interface /auth/register. The root cause is unsanitized user input for the line parameter in the /trojan/log endpoint, which is concatenated into a shell command, enabling...

CVE-2025-5525

CVE-2025-5525 affects Jrohy trojan up to version 2.15.3. The flaw is in the LogChan function (trojan/util/linux.go) where mishandling of the argument c enables os command injection. Exploitation can be performed remotely; attack complexity is described as high, with public disclosures available. ...