Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Leigoit

#24939of 53,624
9.8Total CVSS
Vulnerabilities · 1
PT-2025-44008
9.8
2025-10-27
Quequnlong · Shiyi-Blog · CVE-2025-12305
**Name of the Vulnerable Software and Affected Versions** quequnlong shiyi-blog versions up to 1.2.1 **Description** A flaw exists in the Job Handler component of quequnlong shiyi-blog. The issue involves deserialization within an unknown function of the file `src/main/java/com/mojian/controller/SysJobController.java`. This can be exploited remotely. The exploit is publicly available. **Recommendations** Versions prior to 1.2.1 should be updated. As a temporary workaround, consider restricting access to the `SysJobController.java` file to minimize the risk of exploitation.