<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: zhilink</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-8806: A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0</title><link>https://patchthecve.com/cve/CVE-2025-8806.html</link><guid>https://patchthecve.com/cve/CVE-2025-8806.html</guid><pubDate>Wed, 17 Jun 2026 10:07:40 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. It has been classified as critical. This affects an unknown part of the file /adpweb/a/sys/office/treeData. The manipulation of the argument extId leads to sql injection. It is possible to initiate t</description></item><item><title>CVE-2025-5326: A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0 and classi</title><link>https://patchthecve.com/cve/CVE-2025-5326.html</link><guid>https://patchthecve.com/cve/CVE-2025-5326.html</guid><pubDate>Wed, 17 Jun 2026 09:47:41 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0 and classified as critical. Affected by this issue is some unknown functionality of the file /adpweb/wechat/verifyToken/. The manipulation leads to deserialization. The attack may be launched remotely</description></item><item><title>CVE-2025-5325: A vulnerability has been found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0 and c</title><link>https://patchthecve.com/cve/CVE-2025-5325.html</link><guid>https://patchthecve.com/cve/CVE-2025-5325.html</guid><pubDate>Wed, 17 Jun 2026 09:47:41 +0000</pubDate><description>MEDIUM 6.3: A vulnerability has been found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /adpweb/a/ica/api/service/rfa/testService. The manipulation leads to improper neutralization of </description></item></channel></rss>