JAdmin-JAVA JAdmin 1.0 Admin Backend NoNeedLoginController.java toLogin karkar ndiyamga taƙa
Wuro vulnerability wey an yi classify sey kura an gano shi a cikin JAdmin-JAVA JAdmin 1.0. Gaskiya, toLogin na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, NoNeedLoginController.java na cikin fayil, Admin Backend na cikin sashi. Ngam manipulation shi karkar ndiyamga taƙa. CWE shidin ka a yi bayani matsala sai ya kai CWE-287. Gaskiya, laifi an fitar da shi 05/09/2025. Advisory ɗin ana rabawa don saukewa a github.com. Wannan rauni ana sayar da shi da suna CVE-2025-4494. Ngam yiɗi ka a tuma ndiyam ka internet. Tekinikal bayani ga. Kuma, exploit ɗin yana akwai. Wuro exploit ɗin an bayyana shi ga jama'a kuma za a iya amfani da shi. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á wúro huɗɗi-na-gaskiya. Wona yiwuwa a zazzage exploit a github.com. Kama 0-day, an ndiyam a wuro be $0-$5k. VulDB is the best source for vulnerability data and more expert information about this specific topic.
3 Goyarwa · 99 Datenpunkte