OA C6 - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/oa-c6/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSun, 08 Nov 2026 19:33:33 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgJinher OA C6: SQL injection in ProjectAfficheManage.aspx (CVE-2026-124331)https://feed.craftedsignal.io/briefs/2026-11-jinher-oa-c6-sql-injection/Sun, 08 Nov 2026 19:33:33 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-jinher-oa-c6-sql-injection/A SQL injection vulnerability exists in Jinher OA C6 within the ProjectAfficheManage.aspx file.<p>A vulnerability was identified in Jinher OA C6 in the file /C6/JHSoft.Web.Project/OfficeReadOnly/ProjectAfficheManage.aspx. Manipulation of the ProjID argument leads to SQL injection. The attack can be launched remotely. Public exploit code is available. The vendor was contacted but did not respond.</p> highadvisory