CVE-2025-13268Medium· 6.3▾ SunlitA flaw has been found in Dromara dataCompare up to 1.0.1. The affected element is the function DbConfig of the file src/main/java/com/vince/xq/project/system/dbconfig/service/DbconfigServiceImpl.java of the component JDBC URL Handler. Ex…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 34.7 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 7.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
0.3% → 0.3%
A flaw has been found in Dromara dataCompare up to 1.0.1. The affected element is the function DbConfig of the file src/main/java/com/vince/xq/project/system/dbconfig/service/DbconfigServiceImpl.java of the component JDBC URL Handler. Executing manipulation can lead to injection. The attack can be launched remotely. The exploit has been published and may be used.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-14674Medium· 6.3A vulnerability was found in aizuda snail-job up to 1.6.0
CVE-2026-92213Medium· 5.5A vulnerability was detected in a2ui-project a2ui up to 0.10.6
CVE-2025-66545Low· 3.5Nextcloud Groupfolders provides admin-configured folders shared by everyone in a group or team
CVE-2023-32785Critical· 9.8Langchain SQL Injection vulnerability
CVE-2026-76302Critical· 9.9Security Hardening in Splunk Enterprise - October 2026
CVE-2026-76526High· 8.8Improper Neutralization in Splunk SOAR