Submit #993200: YunaiV (zhijiantianya) ruoyi-vue-pro (Yudao) master-jdk17 @ 7cab3a7 (2026-09-20); master and master-jdk25 are affected as well; no fixed version as of 2026-09-21 Authentication [Accepted]
Submit #993200 / VDB-426104
Vuldb Submit
Please support the site operations by clicking ads.
Submit #993199: YunaiV (zhijiantianya) ruoyi-vue-pro (Yudao) master-jdk17 @ 7cab3a7 (2026-09-20); master and master-jdk25 are affected as well; no fixed version as of 2026-09-21 Authentication [Accepted]
Submit #993199 / VDB-426103
Submit #992835: onyx-dot-app Onyx Craft main commit 711a0479f1630dcce38f8f58212a63080702b753 Same-Origin Iframe Sandbox Bypass / Stored Cross-Site Scripting [Accepted]
Submit #992835 / VDB-426102
Submit #992813: Zylon AI PrivateGPT 1.0.0/1.0.1/65b9b2b6 Server-Side Request Forgery (CWE-918) [Accepted]
Submit #992813 / VDB-426100
Submit #992141: mansi-k Restaurant_IMS * SQL Injection [Accepted]
Submit #992141 / VDB-426096
Submit #991961: pig-mesh Pig 4.1.0 SQL injection [Accepted]
Submit #991961 / VDB-426095
Submit #990504: Unitree Robotics Unitree Go2 (voice assistant component `chat_go`) 1.1.4/1.1.7/1.1.7.2 Improper Certificate Validation [Accepted]
Submit #990504 / VDB-426094
Submit #990502: Unitree Robotics Unitree Go2 (voice assistant component `chat_go`) 1.1.4/1.1.7/1.1.7.2 OS Command Injection [Accepted]
Submit #990502 / VDB-426093
Submit #983231: phpIPAM 1.x Cross Site Scripting [Accepted]
Submit #983231 / VDB-426076
Submit #983034: phpIPAM 1.7.4/1.8.0/1.8.1/1.8.2/1.8.3 Cross Site Scripting [Accepted]
Submit #983034 / VDB-426075
Submit #986184: Faveo Faveo Helpdesk 2.0.3 Weak Password Recovery Mechanism [Accepted]
Submit #986184 / VDB-426054
Submit #986183: Faveo Faveo Helpdesk 2.0.3 Missing Authorization [Accepted]
Submit #986183 / VDB-426053
Submit #992175: Opptrix Opptrix Server v0.4.0 Denial of Service [Accepted]
Submit #992175 / VDB-426052
Submit #992174: Opptrix Opptrix Server v0.4.0 Code Injection [Accepted]
Submit #992174 / VDB-426051
Submit #992173: github.com/Travisun/Opptrix Opptrix Server v0.4.0 Command Injection [Accepted]
Submit #992173 / VDB-426050
Submit #916011: Scada-LTS 2.8.0 Improper Authorization [Accepted]
Submit #916011 / VDB-425987
Submit #1022289: InternScience InternAgent commit fa8c3eedfa9751d3752ea6eb49220b303ac2397d (main HEAD as of 2026-07-29) Improper Input Validation [Accepted]
Submit #1022289 / VDB-425984
Submit #1022283: Kakao khaiii commit 3d0c8944374163b1107fd6690ccf3a408430a02d (master, 2025-05-22; version 0.4) Out-of-bounds Read [Accepted]
Submit #1022283 / VDB-425983
Submit #1022230: UbiquitousLearning mllm 2.0.2 (commit bc8f5cdb557f) Path Traversal [Accepted]
Submit #1022230 / VDB-425982
Submit #1022076: Tenda F6 (N300) Wireless Router Firmware V12.02.01.73 (Hardware V5.0) Cleartext Transmission of Sensitive Information (CWE-319) [Accepted]
Submit #1022076 / VDB-425975
Submit