PatchTheCVE: zerofhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2022-25323: ZEROF Web Server 2.0 allows /admin.back XSS.https://patchthecve.com/cve/CVE-2022-25323.htmlhttps://patchthecve.com/cve/CVE-2022-25323.htmlWed, 17 Jun 2026 04:33:23 +0000MEDIUM 6.1: ZEROF Web Server 2.0 allows /admin.back XSS.CVE-2022-25322: ZEROF Web Server 2.0 allows /HandleEvent SQL Injection.https://patchthecve.com/cve/CVE-2022-25322.htmlhttps://patchthecve.com/cve/CVE-2022-25322.htmlWed, 17 Jun 2026 04:33:23 +0000CRITICAL 9.8: ZEROF Web Server 2.0 allows /HandleEvent SQL Injection.CVE-2021-30176: The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to thttps://patchthecve.com/cve/CVE-2021-30176.htmlhttps://patchthecve.com/cve/CVE-2021-30176.htmlWed, 17 Jun 2026 03:49:48 +0000CRITICAL 9.8: The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to the /v2/devices/add endpoint.CVE-2021-30175: ZEROF Web Server 1.0 (April 2021) allows SQL Injection via the /HandleEvent endpoint for the login page.https://patchthecve.com/cve/CVE-2021-30175.htmlhttps://patchthecve.com/cve/CVE-2021-30175.htmlWed, 17 Jun 2026 03:49:47 +0000CRITICAL 9.8: ZEROF Web Server 1.0 (April 2021) allows SQL Injection via the /HandleEvent endpoint for the login page.