CVE-2025-12305

A vulnerability was found in quequnlong shiyi-blog up to 1.2.1. This impacts an unknown function of the file src/main/java/com/mojian/controller/SysJobController.java of the component Job Handler. The manipulation results in deserialization. The attack can be executed remotely. The exploit has been made public and could be used.

• CWE-20
• CWE-502
• CWE-502

• https://github.com/dongodid/cve-sub/blob/main/shiyi-blog/RCE.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.329977Permissions Required, VDB Entry
• https://vuldb.com/?id.329977Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.676725Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.676730Third Party Advisory, VDB Entry

Published

Oct 27, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-1230Stored Cross-Site Scripting (XSS) vulnerability in Prestasho…4.8
• CVE-2025-12300A weakness has been identified in code-projects Simple Food …6.1
• CVE-2025-12301A security vulnerability has been detected in code-projects …9.8
• CVE-2025-12302A vulnerability was detected in code-projects Simple Food Or…6.1
• CVE-2025-12303A flaw has been found in PHPGurukul Curfew e-Pass Management…4.8
• CVE-2025-12304A vulnerability has been found in dulaiduwang003 TIME-SEA-PL…4.3
• CVE-2025-12306A vulnerability was determined in code-projects Nero Social …9.8
• CVE-2025-12307A vulnerability was identified in code-projects Nero Social …9.8
• CVE-2025-12308A security flaw has been discovered in code-projects Nero So…9.8
• CVE-2025-12309A weakness has been identified in code-projects Nero Social …9.8
• CVE-2025-1231Improper password reset in PAM Module in Devolutions Server …5.4
• CVE-2025-12310A security vulnerability has been detected in VirtFusion up …5.5