fit2cloud
Cloud & SaaScommercial
Top products
Latest CVEs
The 15 most recently published vulnerabilities affecting fit2cloud.
- CVE-2026-42463SQLBot: Unauthorized Access Vulnerability8.1
- CVE-2026-33324SQLBot prompt injection allows arbitrary SQL execution and remote code execution8.8
- CVE-2026-32950SQLBot: RCE via SQL Injection in Excel Upload Endpoint8.8
- CVE-2026-32949SQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQL7.5
- CVE-2026-32622SQLBot: Remote Code Execution via Terminology Poisoning8.8
- CVE-2026-31864JumpServer has a Server-Side Template Injection Leading to RCE via YAML Rendering6.8
- CVE-2026-31798JumpServer Improper Certificate Validation in Custom SMS API Client5.0
- CVE-2025-15598Dataease SQLBot JWT Token auth.py validateEmbedded signature verification3.7
- CVE-2025-15597Dataease SQLBot API Endpoint assistant.py access control6.3
- CVE-2025-70981CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface (/user/list) via the departmentIds parameter.9.8
- CVE-2025-69285SQLBot uploadExcel Endpoint has Unauthenticated Arbitrary File Upload vulnerability6.1
- CVE-2025-344291Panel CSRF Web Port Configuration Change7.1
- CVE-2025-344301Panel CSRF Panel Name Modification4.3
- CVE-2025-344101Panel CSRF in Change Username Functionality Allows Account Lockout7.1
- CVE-2025-665081Panel IP Access Control Bypass via Untrusted X-Forwarded-For Headers6.5