anji-plus AJ-Report is affected by an authentication bypass vulnerability. A remote and unauthenticated attacker can append “;swagger-ui” to HTTP requests to bypass authentication and execute arbitrary Java on the victim server.
https://vulncheck.com/advisories/aj-report-swagger
https://gitee.com/anji-plus/report/pulls/166/files
https://github.com/yuebusao/AJ-REPORT-EXPLOIT
https://github.com/vulhub/vulhub/tree/master/aj-report/CNVD-2024-15077
Description A vulnerability was found in lmxcms up to 1.4 and classified as critical. Affected by this issue is the
Description Dovecot accepts dot LF DOT LF symbol as end of DATA command. RFC requires that it should always be
Description A vulnerability, which was classified as problematic, was found in Wavelog up to 1.8.0. Affected is the function index