Sh7Err

A security issue exists in Dreampie Resty. Manipulation of the `filename` argument within the `Request` function, located in the file `/resty-httpclient/src/main/java/cn/dreampie/client/HttpClient.java` of the HttpClient Module, can lead to a path traversal condition. This issue is considered highly complex to exploit, but the exploit has been publicly disclosed. The vendor was notified but did not respond.

A flaw exists in the Job Handler component of WeiYe-Jing datax-web, specifically within the `remove`, `update`, `pause`, `start`, and `triggerJob` functions. This issue results in improper access controls, potentially allowing for remote exploitation. The exploit is publicly available.

A flaw exists in WeiYe-Jing datax-web that can lead to SQL injection. The issue is present in an unknown function and may be exploited remotely by executing manipulation. The exploit has been published.

A flaw exists in pojoin h3blog version 1.0 where manipulation of the `Name` argument in an unknown function within the file '/admin/cms/material/add' can lead to cross site scripting. This issue is potentially exploitable remotely. The exploit has been publicly disclosed.