qinming99 vulnerabilities

Products

• dst-admin 2

Latest qinming99 CVEs

Newest publication first

1. CVE-2026-2957 qinming99 dst-admin File BackupController.java deleteBackup denial of service

   Published 2026-02-22

   Medium·CVSS 5.3 EPSS 0.43%

   A weakness has been identified in qinming99 dst-admin up to 1.5.0. This impacts the function deleteBackup of the file src/main/java/com/tugos/dst/admin/controller/BackupController.java of the component File Handler. This manipulation causes denial of service. The attack may be in...

2. CVE-2026-2956 qinming99 dst-admin restore revertBackup command injection

   Published 2026-02-22

   Medium·CVSS 5.3 EPSS 8.9%

   A security flaw has been discovered in qinming99 dst-admin up to 1.5.0. This affects the function revertBackup of the file /home/restore. The manipulation of the argument Name results in command injection. The attack can be launched remotely. The exploit has been released to the...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.