Submit #990501: arizu-id fast-tunnel v1.0.0 Unrestricted Upload of File with Dangerous Type — CWE-434 [Accepted]
Submit #990501 / VDB-422655
Vuldb Submit
Please support the site operations by clicking ads.
Submit #990500: OsclassPoint.com (Osclass) Osclass v8.3.1 SQL Injection — CWE-89 [Accepted]
Submit #990500 / VDB-422654
Submit #990464: mcollina mcp-ripgrep Latest OS Command Injection [Accepted]
Submit #990464 / VDB-422653
Submit #983540: H3C Magic NX15 NX15V100R017 Denial of Service [Accepted]
Submit #983540 / VDB-422421
Submit #983539: H3C Magic NX15 NX15V100R017 Path Traversal [Accepted]
Submit #983539 / VDB-422420
Submit #983538: H3C Magic NX15 NX15V100R017 Code Execution [Accepted]
Submit #983538 / VDB-422417
Submit #983537: H3C Magic NX15 NX15V100R017 OS Command Injection [Accepted]
Submit #983537 / VDB-422416
Submit #990315: Dolibarr Dolibarr ERP CRM Latest develop branch as of the submission date, confirmed on official Docker image (v23.0.2) Content-Type Override and API Authorization Bypass Leading to Un [Accepted]
Submit #990315 / VDB-422397
Submit #990050: Netis Systems (Netcore Group) EAP930 (AX3000 Wireless Gigabit Ceiling Mount Access Point) V0.1.250905.115454 (CWE-912, CWE-798-adjacentm CWE-256/522) [Accepted]
Submit #990050 / VDB-422394
Submit #986821: TiBillet Cooperative Lespass (Django/DRF cooperative back-office and ticketing platform) commit 56c1865 Server-Side Request Forgery (SSRF) — CWE-918 [Accepted]
Submit #986821 / VDB-422393
Submit #987582: Kiwilan php-archive 2.3.02 Kiwilan php-archive ArchiveZip.php extract Path Traversal [Accepted]
Submit #987582 / VDB-422348
Submit #987724: Orbitale ImageMagickPHP 3.3.5 Orbitale ImageMagickPHP Command.php font OS Command Injection [Accepted]
Submit #987724 / VDB-422347
Submit #989395: DiffSK configobj 5.0.9 Denial of Service [Accepted]
Submit #989395 / VDB-422346
Submit #986838: smrealms project contributors smr (Space Merchant Realms open-source game engine) commit 9f7c8a9 Server-Side Request Forgery (SSRF) — CWE-918 [Accepted]
Submit #986838 / VDB-422345
Submit #986822: ptbsare (anx-calibre-manager project contributors) anx-calibre-manager (Flask web companion for the Calibre e-book manager) v1.13.12 Server-Side Request Forgery (SSRF) — CWE-918 [Accepted]
Submit #986822 / VDB-422342
Submit #986798: agit8or1 clientst0r (Django + MariaDB IT documentation / MSP asset management web application; agit8or1/clientst0r on GitHub, ★72, not ar Latest commit on main HEAD at time of audit. property_url_importer.py introduced before v1.0 and…
Submit #986798 / VDB-422335
Submit #986410: Wuxi Wubang Security Software Co., Ltd. Wubang 'Five-in-One' Safety Production Management Information System V3.5 SQL Injection [Accepted]
Submit #986410 / VDB-422334
Submit #986376: antoinersx clawhost 0.0.45 Local Sensitive Logic Exposure Leading to token leakge [Accepted]
Submit #986376 / VDB-422332
Submit #986350: GrandNode grandnode2 <= 2.3.0 Cross Site Scripting [Accepted]
Submit #986350 / VDB-422323
Submit #986349: GrandNode grandnode2 <= 2.3.0 File Inclusion [Accepted]
Submit #986349 / VDB-422322
Submit