<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: ruifang-tech</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-28056: rebuild v3.9.0 through v3.9.3 has a SQL injection vulnerability in /admin/admin-cli/exec component.</title><link>https://patchthecve.com/cve/CVE-2025-28056.html</link><guid>https://patchthecve.com/cve/CVE-2025-28056.html</guid><pubDate>Wed, 17 Jun 2026 09:04:31 +0000</pubDate><description>CRITICAL 9.8: rebuild v3.9.0 through v3.9.3 has a SQL injection vulnerability in /admin/admin-cli/exec component.</description></item><item><title>CVE-2024-12665: A vulnerability, which was classified as problematic, was found in ruifang-tech Rebuild 3.8.5</title><link>https://patchthecve.com/cve/CVE-2024-12665.html</link><guid>https://patchthecve.com/cve/CVE-2024-12665.html</guid><pubDate>Wed, 17 Jun 2026 07:00:14 +0000</pubDate><description>LOW 3.5: A vulnerability, which was classified as problematic, was found in ruifang-tech Rebuild 3.8.5. Affected is an unknown function of the component Task Comment Attachment Upload. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed</description></item><item><title>CVE-2024-12664: A vulnerability, which was classified as problematic, has been found in ruifang-tech Rebuild 3.8.5</title><link>https://patchthecve.com/cve/CVE-2024-12664.html</link><guid>https://patchthecve.com/cve/CVE-2024-12664.html</guid><pubDate>Wed, 17 Jun 2026 07:00:14 +0000</pubDate><description>LOW 3.5: A vulnerability, which was classified as problematic, has been found in ruifang-tech Rebuild 3.8.5. This issue affects some unknown processing of the component Project Task Comment Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been dis</description></item></channel></rss>