Submit #983539: H3C Magic NX15 NX15V100R017 Path Traversal [Accepted]
Submit #983539 / VDB-422420
Vuldb Submit
Please support the site operations by clicking ads.
Submit #983538: H3C Magic NX15 NX15V100R017 Code Execution [Accepted]
Submit #983538 / VDB-422417
Submit #983537: H3C Magic NX15 NX15V100R017 OS Command Injection [Accepted]
Submit #983537 / VDB-422416
Submit #990315: Dolibarr Dolibarr ERP CRM Latest develop branch as of the submission date, confirmed on official Docker image (v23.0.2) Content-Type Override and API Authorization Bypass Leading to Un [Accepted]
Submit #990315 / VDB-422397
Submit #990050: Netis Systems (Netcore Group) EAP930 (AX3000 Wireless Gigabit Ceiling Mount Access Point) V0.1.250905.115454 (CWE-912, CWE-798-adjacentm CWE-256/522) [Accepted]
Submit #990050 / VDB-422394
Submit #986821: TiBillet Cooperative Lespass (Django/DRF cooperative back-office and ticketing platform) commit 56c1865 Server-Side Request Forgery (SSRF) — CWE-918 [Accepted]
Submit #986821 / VDB-422393
Submit #987582: Kiwilan php-archive 2.3.02 Kiwilan php-archive ArchiveZip.php extract Path Traversal [Accepted]
Submit #987582 / VDB-422348
Submit #987724: Orbitale ImageMagickPHP 3.3.5 Orbitale ImageMagickPHP Command.php font OS Command Injection [Accepted]
Submit #987724 / VDB-422347
Submit #989395: DiffSK configobj 5.0.9 Denial of Service [Accepted]
Submit #989395 / VDB-422346
Submit #986838: smrealms project contributors smr (Space Merchant Realms open-source game engine) commit 9f7c8a9 Server-Side Request Forgery (SSRF) — CWE-918 [Accepted]
Submit #986838 / VDB-422345
Submit #986822: ptbsare (anx-calibre-manager project contributors) anx-calibre-manager (Flask web companion for the Calibre e-book manager) v1.13.12 Server-Side Request Forgery (SSRF) — CWE-918 [Accepted]
Submit #986822 / VDB-422342
Submit #986798: agit8or1 clientst0r (Django + MariaDB IT documentation / MSP asset management web application; agit8or1/clientst0r on GitHub, ★72, not ar Latest commit on main HEAD at time of audit. property_url_importer.py introduced before v1.0 and…
Submit #986798 / VDB-422335
Submit #986410: Wuxi Wubang Security Software Co., Ltd. Wubang 'Five-in-One' Safety Production Management Information System V3.5 SQL Injection [Accepted]
Submit #986410 / VDB-422334
Submit #986376: antoinersx clawhost 0.0.45 Local Sensitive Logic Exposure Leading to token leakge [Accepted]
Submit #986376 / VDB-422332
Submit #986350: GrandNode grandnode2 <= 2.3.0 Cross Site Scripting [Accepted]
Submit #986350 / VDB-422323
Submit #986349: GrandNode grandnode2 <= 2.3.0 File Inclusion [Accepted]
Submit #986349 / VDB-422322
Submit #986348: Wuxi Wubang Security Software Co., Ltd. Wubang 'Five-in-One' Safety Production Management Information System V3.5 Improper Neutralization of Alternate XSS Syntax [Accepted]
Submit #986348 / VDB-422321
Submit #986186: UVdesk community-skeleton 1.1.8 Missing Authorization [Duplicate]
Submit #986186 / VDB-406172
Submit #984968: FusionPBX 5.6.4-dev Command Injection [Accepted]
Submit #984968 / VDB-422297
Submit #973095: Webkul Aureuserp v1.6.0 Weak Password Requirements [Accepted]
Submit #973095 / VDB-422296
Submit