CVE-2025-14674Medium· 6.3▾ SunlitA vulnerability was found in aizuda snail-job up to 1.6.0. Affected by this vulnerability is the function QLExpressEngine.doEval of the file snail-job-common/snail-job-common-core/src/main/java/com/aizuda/snailjob/common/core/expression/…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 34.7 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 28.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
A vulnerability was found in aizuda snail-job up to 1.6.0. Affected by this vulnerability is the function QLExpressEngine.doEval of the file snail-job-common/snail-job-common-core/src/main/java/com/aizuda/snailjob/common/core/expression/strategy/QLExpressEngine.java. The manipulation results in injection. The attack can be launched remotely. Upgrading to version 1.7.0-beta1 addresses this issue. The patch is identified as 978f316c38b3d68bb74d2489b5e5f721f6675e86. The affected component should be upgraded.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-13268Medium· 6.3A flaw has been found in Dromara dataCompare up to 1.0.1
CVE-2026-92213Medium· 5.5A vulnerability was detected in a2ui-project a2ui up to 0.10.6
CVE-2025-66545Low· 3.5Nextcloud Groupfolders provides admin-configured folders shared by everyone in a group or team
CVE-2023-32785Critical· 9.8Langchain SQL Injection vulnerability
CVE-2026-76302Critical· 9.9Security Hardening in Splunk Enterprise - October 2026
CVE-2026-76526High· 8.8Improper Neutralization in Splunk SOAR