CVE-2025-11251Disclosure(daynex / woyio)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows SQL Injection. This issue affects E-Commerce Platform: through 27022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

daynex CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.usom.gov.tr/bildirim/tr-26-0084

Other references

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0084

Weakness type (CWE)

CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

woyio

Threat summary

7 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 6 signals
Disclosure: 6 classified signals
General: 1 classified signal
Peaked 2d ago at 5 mentions (2026-02-27); latest day: 1
7 total mentions across 3 days

Affected systems

Vendors

daynex

Products

woyio

1 version affected across 1 product

Deep dive

Activity timeline7 mentions / 3d

Signal classification2 categories

Disclosure

685.7%

General

114.3%

Referenced assets7 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-27	5	Disclosure5
2026-03-04	1	Disclosure1
2026-03-11	1	General1

Full discourse7 posts

Security Land@securityland_213d
General
The OpenClaw autonomous AI agent has achieved explosive growth, but its rapid rise has triggered a major security crisis. China's MIIT and CNCERT have issued urgent warnings. Read More: https://www.security.land/china-openclaw-ai-security-alert-cve-2025-11251/ #SecurityLand #GeoSphere #China #OpenClaw #AI #SecurityVulnerability https://t.co/Hrd2fOGtAw
Post summary
The tweet announces a security alert for CVE‑2025‑11251, citing urgent warnings from Chinese authorities, but provides no technical details, PoC references, or mitigation information.
00011116
24 followersView on X
CRAC Learning - Tech@cracbot221d
Disclosure
CVE-2025-11251 (CVSS:9.8, CRITICAL) is Analyzed. Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dayneks Software I..https://nvd.nist.gov/vuln/detail/CVE-2025-11251 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post references CVE-2025-11251, noting its critical CVSS score and SQL injection nature, but provides no PoC, exploit, patch, or active exploitation details.
0000049
173 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds225d
Disclosure
CVE-2025-11251 SQL Injection Vulnerability in Dayneks E-Commerce Platform Through 27022026 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-11251
Post summary
The text announces CVE‑2025‑11251 as an SQL injection flaw in the Dayneks E‑Commerce Platform, with no evidence of exploitation, PoC, or patch availability.
0000029
4.0K followersView on X
CVE@CVEnew225d
Disclosure
CVE-2025-11251 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform all… https://www.cve.org/CVERecord?id=CVE-2025-11251
Post summary
An SQL injection vulnerability (CVE‑2025‑11251) in Dayneks Software's e‑commerce platform is disclosed via a CVE record link, with no PoC, exploit, patch, or active exploitation details provided.
0000066
56.6K followersView on X
The Hacker Wire@TheHackerWire226d
Disclosure
🔴 CVE-2025-11251 - Critical Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows SQL Injection.Thi... https://www.thehackerwire.com/vulnerability/CVE-2025-11251/ https://t.co/sAVlTL8EcT
Post summary
The tweet announces CVE‑2025‑11251 as a critical SQL injection vulnerability in Dayneks Software, providing technical details but no PoC, exploit, or patch information.
0000025
119 followersView on X
CVEFind.com@CveFindCom226d
Disclosure
[CVE-2025-11251: CRITICAL] SQL Injection vulnerability in Dayneks Software Industry E-Commerce Platform allows attackers to execute malicious SQL commands. Vendor notified but no response.#cve,CVE-2025-11251,#cybersecurity https://cvefind.com/CVE-2025-11251
Post summary
A critical SQL Injection vulnerability (CVE‑2025‑11251) has been disclosed for Dayneks Software Industry E‑Commerce Platform; the vendor has been notified but no PoC, exploit, or patch details are provided.
0000033
585 followersView on X
CVETodo@CveTodo226d
Disclosure
**CVE-2025-11251** is a **SQL Injection** vulnerability affecting the **Dayneks Software Industry and Trade Inc. E-Commerce Platform**, specifically versions **up to 27022026**. SQL Injection occurs when an attacker can insert malicious SQL code into input fields that are improperly sanitized, allowing arbitrary SQL commands to be executed by the database. #Cybersecurity #CVE #CriticalCVE #CriticalVulnerability #RemoteCodeExecution #SQLInjection #XSS https://cvetodo.com/cve/CVE-2025-11251
Post summary
The post announces CVE-2025-11251, a SQL injection vulnerability in Dayneks Software’s e‑commerce platform affecting versions up to 27022026, with no PoC, exploit, or patch details provided.
0000024
20 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	daynex	woyio	-	-	-

Explore more

Back to dashboard daynex CVEs woyio vulnerabilities

What researchers are saying

CVE-2025-11251

CVETodo[verified]@CveTodoDisclosure

The post announces CVE-2025-11251, a SQL injection vulnerability in Dayneks Software’s e‑commerce platform affecting versions up to 27022026, with no PoC, exploit, or patch details provided.

Security Land@securityland_General

The tweet announces a security alert for CVE‑2025‑11251, citing urgent warnings from Chinese authorities, but provides no technical details, PoC references, or mitigation information.

CRAC Learning - Tech@cracbotDisclosure

The post references CVE-2025-11251, noting its critical CVSS score and SQL injection nature, but provides no PoC, exploit, patch, or active exploitation details.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The text announces CVE‑2025‑11251 as an SQL injection flaw in the Dayneks E‑Commerce Platform, with no evidence of exploitation, PoC, or patch availability.

CVE@CVEnewDisclosure

An SQL injection vulnerability (CVE‑2025‑11251) in Dayneks Software's e‑commerce platform is disclosed via a CVE record link, with no PoC, exploit, patch, or active exploitation details provided.

The Hacker Wire@TheHackerWireDisclosure

The tweet announces CVE‑2025‑11251 as a critical SQL injection vulnerability in Dayneks Software, providing technical details but no PoC, exploit, or patch information.

CVEFind.com@CveFindComDisclosure

A critical SQL Injection vulnerability (CVE‑2025‑11251) has been disclosed for Dayneks Software Industry E‑Commerce Platform; the vendor has been notified but no PoC, exploit, or patch details are provided.