Submit #996819: aaPanel aaPanel Linux Panel v8.22.0 (GitHub commit 4af59b2386e118fc0e4b2ae838dacac992d16b1c, 2026-08-27) OS Command Injection (CWE-78) [Accepted]
Submit #996819 / VDB-422748
Vuldb Submit
Please support the site operations by clicking ads.
Submit #996818: aaPanel aaPanel Linux Panel v8.22.0 (commit 4af59b2386e118fc0e4b2ae838dacac992d16b1c, 2026-08-27) Path Traversal / Local File Inclusion (CWE-22) [Accepted]
Submit #996818 / VDB-422747
Submit #1004924: minio minio RELEASE.2025-10-15T17-29-55Z Improper Verification of Cryptographic Signature [Duplicate]
Submit #1004924 / VDB-351748
Submit #1004925: MinIO <=RELEASE.2025-10-15T17-29-55Z Use of Hard-coded Cryptographic Key [Accepted]
Submit #1004925 / VDB-422691
Submit #1008849: Umbraco A/S Umbraco CMS 17.6.2 LTS (latest stable version at the test time) Stored XSS Leading to Administrator Account Creation [Duplicate]
Submit #1008849 / VDB-247631
Submit #1013190: Nerimity nerimity-desktop 2.2.0 / commit fb9c56c97 Code Injection [Accepted]
Submit #1013190 / VDB-422677
Submit #992250: DrayTek Vigor2960 Vigor2960 1.5.1.6 (revision 8218) Authenticated ruequest_certificate Command Injection [Accepted]
Submit #992250 / VDB-422673
Submit #992249: DrayTek Vigor2960 Vigor2960 1.5.1.6 (revision 8218) Authenticated rename_table Command Injection [Accepted]
Submit #992249 / VDB-422672
Submit #992248: DrayTek Vigor2960 Vigor2960 1.5.1.6 (revision 8218) Authenticated swmconfigupload Field-Name Path Traversal and Comm [Accepted]
Submit #992248 / VDB-422671
Submit #992247: DrayTek Vigor2960 Vigor2960 1.5.1.6 (revision 8218) uthenticated setSWMProfile Path Traversal and Filename Command I [Accepted]
Submit #992247 / VDB-422670
Submit #992246: DrayTek Vigor2960 Vigor2960 1.5.1.6 (revision 8218) Authenticated commonupload Arbitrary File Clobber and Command In [Accepted]
Submit #992246 / VDB-422669
Submit #992245: DrayTek Vigor2960 Vigor2960 1.5.1.6 (revision 8218) uthenticated apmupload Path Traversal File Clobber [Accepted]
Submit #992245 / VDB-422668
Submit #992244: DrayTek Vigor2960 Vigor2960 1.5.1.6 (revision 8218) Upload Filename Command Injection Across Multiple Authenticated [Accepted]
Submit #992244 / VDB-422667
Submit #992224: DrayTek Vigor2960 Vigor2960 1.5.1.6 (revision 8218) Authenticated jsonstatus File Operations and Multi-Sink Command [Accepted]
Submit #992224 / VDB-422666
Submit #992223: DrayTek Vigor2960 Vigor2960 1.5.1.6 (revision 8218) Authenticated set_table JSONData Command Injection [Accepted]
Submit #992223 / VDB-422665
Submit #992222: DrayTek Vigor2960 Vigor2960 1.5.1.6 (revision 8218) Hidden APM Upload Authentication Bypass Leading to Restricted Ar [Duplicate]
Submit #992222 / VDB-157503
Submit #1009749: opensource-socialnetwork Open Source Social Network (OSSN) v9.1.0.0 (master branch, commit 9983ea4) CWE-94 Remote Code Execution (RCE) [Accepted]
Submit #1009749 / VDB-422662
Submit #1003932: LeeDrOiD Labs Shortcutter - Quick Settings & Shortcuts (com.leedroid.shortcutter) 7.8.0 (780) Privilege Escalation [Accepted]
Submit #1003932 / VDB-422658
Submit #991714: Optimal IdM, LLC The OptimalCloud v5.0 Open Redirect [Accepted]
Submit #991714 / VDB-422657
Submit #991713: Optimal IdM The OptimalCloud v5.0 Cross Site Scripting [Accepted]
Submit #991713 / VDB-422656
Submit