Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 02:51:06 +0000 EUVD-2026-250338 https://cve.radiocsirt.org/vuln/euvd-2026-250338 EUVD-2026-250338 https://cve.radiocsirt.org/vuln/euvd-2026-250338 fkie_cve-2025-9263 https://cve.radiocsirt.org/vuln/fkie_cve-2025-9263 <p>A vulnerability has been found in Xuxueli xxl-job up to 3.1.1. Affected by this vulnerability is the function getJobsByGroup of the file /src/main/java/com/xxl/job/admin/controller/JobLogController.java. Such manipulation of the argument jobGroup leads to improper control of resource identifiers. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.</p> <p>A vulnerability has been found in Xuxueli xxl-job up to 3.1.1. Affected by this vulnerability is the function getJobsByGroup of the file /src/main/java/com/xxl/job/admin/controller/JobLogController.java. Such manipulation of the argument jobGroup leads to improper control of resource identifiers. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-9263 GHSA-6rq7-m52p-8pqg — xxl-job Vulnerable to Resource Injection and Authorization Bypass Through User-Controlled Key https://cve.radiocsirt.org/vuln/ghsa-6rq7-m52p-8pqg <p><strong>Affected:</strong> Maven: com.xuxueli:xxl-job-admin</p> <p>A vulnerability has been found in Xuxueli xxl-job up to 3.1.1. Affected by this vulnerability is the function getJobsByGroup of the file /src/main/java/com/xxl/job/admin/controller/JobLogController.java. Such manipulation of the argument jobGroup leads to improper control of resource identifiers. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.</p> <p><strong>Affected:</strong> Maven: com.xuxueli:xxl-job-admin</p> <p>A vulnerability has been found in Xuxueli xxl-job up to 3.1.1. Affected by this vulnerability is the function getJobsByGroup of the file /src/main/java/com/xxl/job/admin/controller/JobLogController.java. Such manipulation of the argument jobGroup leads to improper control of resource identifiers. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.</p> https://cve.radiocsirt.org/vuln/ghsa-6rq7-m52p-8pqg