CVE-2025-13268Medium· 6.3▾ SunlitA flaw has been found in Dromara dataCompare up to 1.0.1. The affected element is the function DbConfig of the file src/main/java/com/vince/xq/project/system/dbconfig/service/DbconfigServiceImpl.java of the component JDBC URL Handler. Ex…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 34.7 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
A flaw has been found in Dromara dataCompare up to 1.0.1. The affected element is the function DbConfig of the file src/main/java/com/vince/xq/project/system/dbconfig/service/DbconfigServiceImpl.java of the component JDBC URL Handler. Executing manipulation can lead to injection. The attack can be launched remotely. The exploit has been published and may be used.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-14674Medium· 6.3A vulnerability was found in aizuda snail-job up to 1.6.0
CVE-2026-92213Medium· 5.5A vulnerability was detected in a2ui-project a2ui up to 0.10.6
CVE-2026-76284NoneImproper Neutralization
CVE-2025-13485High· 7.3A security flaw has been discovered in itsourcecode Online File Management System 1.0
CVE-2025-13302Medium· 4.7A vulnerability was identified in code-projects Courier Management System 1.0
CVE-2025-13303Medium· 6.3A vulnerability was determined in code-projects Courier Management System 1.0