GCVE - cpe:2.3:a:jrohy:trojan:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jrohy:trojan:*:*:*:*:*:*:*:*

part: a version: * update: *

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:docker/jrohy/trojan`	purl2cpe	2026-06-01 10:14:47.072492
`pkg:github/jrohy/trojan`	purl2cpe	2026-06-01 10:14:47.072495
`pkg:golang/github.com/jrohy/trojan`	purl2cpe	2026-06-01 10:14:47.072498

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-5525`	vulnerable	2026-06-08 07:37:25.096612	Jrohy trojan linux.go LogChan os command injection MEDIUM (5.6) A vulnerability was found in Jrohy trojan up to 2.15.3. It has been declared as critical. This vulnerability affects the function LogChan of the file trojan/util/linux.go. The manipulation of the argument c leads to os command injection. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. Published: 2025-06-03T20:00:10.318Z Updated: 2025-06-03T20:14:30.777Z Open on db.gcve.eu Reference links https://vuldb.com/?id.310966 https://vuldb.com/?ctiid.310966 https://vuldb.com/?submit.586673 https://github.com/ainrm/Jrohy-trojan-unauth-poc/blob/main/README.en.md https://github.com/Tritium0041/Jrohy-trojan-RCE-POC/blob/main/POC.py	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-55215`	vulnerable	2026-06-08 06:54:16.960050	Details available An issue in trojan v.2.0.0 through v.2.15.3 allows a remote attacker to escalate privileges via the initialization interface /auth/register. Published: 2025-02-07T00:00:00.000Z Updated: 2025-03-19T18:21:06.336Z Open on db.gcve.eu Reference links https://github.com/ainrm/Jrohy-trojan-unauth-poc/blob/main/README.en.md	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.