Submit #997884: TinyLLaVA TinyLLaVA_Factory up to 1.0.0 Code Injection [Accepted]
Submit #997884 / VDB-416776
Vuldb Submit
Please support the site operations by clicking ads.
Submit #997845: Fabian Ros (Code-Projects) Online Reviewer System 1.0 Unauthenticated SQL Injection [Accepted]
Submit #997845 / VDB-416775
Submit #997844: Tiiny-AI PowerInfer up to main commit 8bd56d69906c9d2dba4d3bf6899763401e01a9a4 Out-of-Bounds (CWE-125) [Accepted]
Submit #997844 / VDB-416774
Submit #997824: k2-fsa sherpa-onnx up to 1.13.8 (master commit 040afe360a38e25daaa325ce8889abf93ea02609 also affected) Heap-based Buffer Overflow [Accepted]
Submit #997824 / VDB-416773
Submit #997820: Fabian Ros (Code-Projects) Online Reviewer System 1.0 Privilege Escalation / Broken Access Control / Mass Assignment [Accepted]
Submit #997820 / VDB-416772
Submit #997819: yoshitomo-matsubara torchdistill up to 1.1.5 Insecure Deserialization [Accepted]
Submit #997819 / VDB-416771
Submit #997729: iMoonLab up to main commit 73289949533efac82bb5f72ec19b746618656bd2 Code Injection (CWE-94) [Accepted]
Submit #997729 / VDB-416770
Submit #997719: bytetriper RAE up to main commit a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041 (last commit 2026-01-20) Code Injection [Accepted]
Submit #997719 / VDB-416769
Submit #997679: ModelTC LightX2V up to main commit 8652c6f1c7f12f226c43abbb91d4d4e9290932c2 (release 0.5.0, published 2026-09-10) Code Injection (CWE-94) [Accepted]
Submit #997679 / VDB-416768
Submit #997640: philz1337x clarity-upscaler up to main commit cfbdb842c6c839c8e97741722b8cf9a4b7662d98 (last push 2025-03-06) Cross Site Scripting [Accepted]
Submit #997640 / VDB-416767
Submit #997639: Linketic / CityGaussian CityGaussian up to CityGaussian_V2.0 (main commit 3c1e93b38712334877ff3cfdf724e4ec7ee3e65b) Code Injection (CWE-94) [Accepted]
Submit #997639 / VDB-416766
Submit #997601: https://github.com/EricLBuehler/ mistral.rs v0.9.2 Unauthenticated arbitrary-path file write [Accepted]
Submit #997601 / VDB-416764
Submit #997600: https://github.com/EricLBuehler/ mistral.rs v0.9.2 Server-Side Request Forgery [Accepted]
Submit #997600 / VDB-416763
Submit #997582: code-projects Matrimonial System IN PHP, CSS, JS, AND MYSQL 1.0 Information Disclosure [Accepted]
Submit #997582 / VDB-416762
Submit #997564: code-projects Online Ticket Reservation System 1.0 File and Directory Information Exposure [Accepted]
Submit #997564 / VDB-416761
Submit #1005198: Edimax BR-6208AC BR-6208AC_1.32 Cross Site Scripting [Accepted]
Submit #1005198 / VDB-416760
Submit #1005197: Edimax BR-6208AC BR-6208AC_1.32 Cross Site Scripting [Accepted]
Submit #1005197 / VDB-416759
Submit #1005176: Edimax BR-6208AC BR-6208AC_1.32 Cross Site Scripting [Accepted]
Submit #1005176 / VDB-416758
Submit #1005175: Edimax BR-6208AC BR-6208AC_1.32 Cross Site Scripting [Accepted]
Submit #1005175 / VDB-416757
Submit #977186: Netcore NR268 Router NR268-V1.7.121109.bin Stored Cross-Site Scripting [Accepted]
Submit #977186 / VDB-416756
Submit