Skip to content
OpenAdvisories

Vendor

dromara

67 known vulnerabilities.

Products

lamp-cloud 14 UJCMS 7 hertzbeat 6 RuoYi-Vue-Plus 6 free-fs 5 Jpom 5 MaxKey 4 skyeye 4 mayfly-go 2 orion-visor 2 J2eeFAST 2 HuTool 2 Sa-Token 2 warm-flow 1 RuoYi-Cloud-Plus 1 dataCompare 1 open-capacity-platform 1 domain-admin 1 Northstar 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-120201 Scanner template

    Jpom 2.10.0 through 2.11.12 Authentication Bypass via JPOM-USER-TOKEN Header

    Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain super-administrator access by injecting query conditions into the JPOM-USER-TOKEN header. Attackers can send a value like 'is not null', …

    dromara Jpom
  • Critical 9.8
    CVE-2026-107780

    Dromara Skyeye Unauthenticated OS Command Injection via textToSpeech format Parameter

    Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command injection vulnerability in the unauthenticated /post/TtsController/textToSpeech endpoint via the format parameter. Attackers can inject a single quote into format to…

    dromara skyeye
  • Critical 9.8
    CVE-2026-107779

    Dromara Skyeye xxl-job-admin Missing Authentication on Job Endpoints Allows RCE

    Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a missing authentication vulnerability in bundled xxl-job-admin JobInfoController endpoints annotated with @PermissionLimit(limit = false). Unauthenticated attackers can POST GLUE…

    dromara skyeye
  • Critical 9.8
    CVE-2026-69102

    MaxKey Hard-coded JWT Secret Unauthorized Access via /login/jwt/trust

    MaxKey contains an unauthorized access vulnerability due to a hard-coded JWT signing secret in application-maxkey.properties that allows unauthenticated attackers to forge valid JWT tokens and authenticate as any user by exploiting the password-skipped login …

    dromara MaxKey
  • Critical 9.8
    CVE-2023-51389

    HertzBeat SnakeYAML Deser RCE

    Hertzbeat is a real-time monitoring system. At the interface of `/define/yml`, SnakeYAML is used as a parser to parse yml content, but no security configuration is used, resulting in a YAML deserialization vulnerability. Version 1.4.1 fixes this vulnerability.

    dromara hertzbeat
  • Critical 9.8
    CVE-2023-51388

    HertzBeat AviatorScript Inject RCE

    Hertzbeat is a real-time monitoring system. In `CalculateAlarm.java`, `AviatorEvaluator` is used to directly execute the expression function, and no security policy is configured, resulting in AviatorScript (which can execute any static method by default) scr…

    dromara hertzbeat
  • Critical 9.8
    CVE-2023-51653

    Hertzbeat JMX JNDI RCE

    Hertzbeat is a real-time monitoring system. In the implementation of `JmxCollectImpl.java`, `JMXConnectorFactory.connect` is vulnerable to JNDI injection. The corresponding interface is `/api/monitor/detect`. If there is a URL field, the address will be used …

    dromara hertzbeat