Fakebug

**Name of the Vulnerable Software and Affected Versions** alldatacenter alldata versions prior to 0.6.9 **Description** A remote deserialization issue exists within the xxl-rpc Listener component, specifically in the `Hessian2Input.readObject()` function located in the `/serialize/impl/HessianSerializer.java` file. Deserialization occurs when untrusted data is processed, potentially allowing a remote attacker to execute unauthorized actions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, restrict access to the `Hessian2Input.readObject()` function within the xxl-rpc Listener component.

**Name of the Vulnerable Software and Affected Versions** alldatacenter alldata versions prior to 0.6.9 **Description** A path traversal flaw exists in the `logDetailCat` endpoint. The issue resides in the `FileInputStream()` function within the `/admin/controller/JobLogController.java` file. A remote attacker can exploit this by manipulating the `executorAddress` argument to access files outside the intended directory. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** wvp-GB28181-pro version 2.7.4-20260107 **Description** A path traversal issue exists in the Snapshot Endpoint component within the `PlayController.java` file. A remote attacker can exploit this by manipulating the `deviceId` or `channelId` arguments, allowing unauthorized access to files or directories on the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** wvp-GB28181-pro version 2.7.4-20260107 **Description** A path traversal flaw exists in the Log File Download Endpoint within the `LogController.java` file. A remote attacker can manipulate the `fileName` argument to access files outside the intended directory. Path traversal is a technique that allows an attacker to read arbitrary files on the server by using special characters like dot-dot-slash (../) to navigate the file system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the `fileName` argument in the Log File Download Endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** DTStack Taier version 1.4.0 **Description** An OS command injection issue exists in the REST API component. Remote attackers can exploit this by manipulating the `sqlText` argument passed to the `Runtime.exec()` function. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** YunaiV yudao-cloud version 2026.03 **Description** An issue in the Admin API Endpoint component allows for server-side request forgery (SSRF), a condition where an attacker can induce the server to make requests to an unintended location. This occurs through the manipulation of the `IotDataSinkHttpConfig` function within the '/admin-api/iot/data-sink/create' endpoint. The attack can be executed remotely. **Recommendations** As a temporary mitigation, restrict access to the '/admin-api/iot/data-sink/create' endpoint or disable the `IotDataSinkHttpConfig` function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** FlowCI flow-core-x versions through 1.23.01 **Description** A security flaw exists in FlowCI flow-core-x. The issue resides in the `Save` function within the `core/src/main/java/com/flowci/core/config/service/ConfigServiceImpl.java` file of the SMTP Host Handler component. This manipulation can lead to server-side request forgery, and the attack can be initiated remotely. The exploit is publicly available. The vendor was notified but did not respond. **Recommendations** Versions prior to 1.23.01 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.