CVE-2025-20620 | YS STEALTHONE D220/STEALTHONE D340 up to 6.03.02 Web Management Page sql injection
CVE-2025-20620 | YS STEALTHONE D220/STEALTHONE D340 up to 6.03.02 Web Management Page sql injection
A vulnerability, which was classified as critical, has been found in YS STEALTHONE D220 and STEALTHONE D340 up to 6.03.02. This issue affects some unknown processing of the component Web Management Page. The manipulation leads to sql injection. The identification of this vulnerability is CVE-2025-20620. The attack may be initiated remotely. There is no exploit available.Son Yazılar
- CVE-2025-23207 | KaTeX up to 0.16.20 Mathematical Expression renderToString cross site scripting (GHSA-cg87-wmx4-v546)
- CVE-2025-23209 | Craft CMS up to 4.13.7/5.5.4 code injection (GHSA-x684-96hh-833x)
- U.S. Sanctions Chinese Cybersecurity Firm Over Treasury Hack Tied to Silk Typhoon
- CVE-2024-57252 | OtCMS up to 7.46 /admin/read.php server-side request forgery
- CVE-2025-23205 | Jupyter nbgrader 0.9.4 exposure of resource
- CVE-2025-23202 | devycreates Bible-Module up to 0.0.2 FetchVerse/FetchPassage injection
- CVE-2025-23206 | aws aws-cdk 2.148.1 IAM OIDC Custom Resource Provider Package tls.connect signature verification
- CVE-2024-13524 | obsproject OBS Studio up to 30.0.2 on Windows untrusted search path
- CVE-2025-0560 | CampCodes School Management Software 1.0 Photo Gallery Page /photo-gallery Description cross site scripting
- CVE-2025-0559 | Campcodes School Management Software 1.0 Create Id Card Page /create-id-card ID Card Title cross site scripting