Submit #857950: guohongze adminset 6c122c2824e6553b09ebd16a1fa05a593198c5ec CWE-639 Authorization Bypass Through User-Controlled Key [Accepted]
Submit #857950 / VDB-380040
Vuldb Submit
Submit #857947: geex-arts django-jet 0cc1e636109f680de6759ac30c0b14ef980883bc CWE-352 Cross-Site Request Forgery [Accepted]
Submit #857947 / VDB-380039
Submit #857946: geex-arts django-jet 0cc1e636109f680de6759ac30c0b14ef980883bc CWE-862 Missing Authorization [Accepted]
Submit #857946 / VDB-380038
Submit #857945: geex-arts django-jet 0cc1e636109f680de6759ac30c0b14ef980883bc CWE-639 Authorization Bypass Through User-Controlled Key [Accepted]
Submit #857945 / VDB-380037
Submit #857944: Fantomas42 django-blog-zinnia 881101a9d1d455b2fc581d6f4ae0947cdd8126c6 CWE-312 Cleartext Storage of Sensitive Information [Accepted]
Submit #857944 / VDB-380029
Submit #857939: awesto django-shop 13d9a77aff7eede74a5f363c1d540e005d88dbcd CWE-362 Concurrent Execution using Shared Resource with Improper [Accepted]
Submit #857939 / VDB-380028
Submit #857935: allegro ralph bcf65b994ef29fb3fc2e10b660e6288723d5209e CWE-362 Concurrent Execution using Shared Resource with Improper [Accepted]
Submit #857935 / VDB-380027
Submit #857934: wger-project wger 2.6.0-alpha2 / master branch at commit ea7844731f7e3fe5865c327c1f93f5f4a76dde75 CWE-352 Cross-Site Request Forgery / CWE-749 Exposed Dangerous M [Duplicate]
Submit #857934 / VDB-236497
Submit #857933: wger-project wger 2.6.0-alpha2 / master branch at commit ea7844731f7e3fe5865c327c1f93f5f4a76dde75 CWE-352 Cross-Site Request Forgery / CWE-749 Exposed Dangerous M [Duplicate]
Submit #857933 / VDB-236497
Submit #857929: newpanjing simpleui 2026.01.13 at commit 85b887022217b4e46c9a34d227dbf38fef1e7a92 CWE-862 Missing Authorization / CWE-863 Incorrect Authorization [Accepted]
Submit #857929 / VDB-380026
Submit #857926: Gerapy 0.9.13 / master branch at commit 7c4eda875563f5d0342a3650959e0502bc279d77 CWE-862 Missing Authorization / CWE-434 Unrestricted Upload of F [Accepted]
Submit #857926 / VDB-380025
Submit #857925: django-tastypie 0.15.1 at commit 03c4746f0a0f88628be5264bc8d4a19a0529b2f4 CWE-362 Concurrent Execution using Shared Resource with Improper [Accepted]
Submit #857925 / VDB-380024
Submit #857924: django-tastypie 0.15.1 at commit 03c4746f0a0f88628be5264bc8d4a19a0529b2f4 CWE-598 Use of GET Request Method With Sensitive Query Strings [Accepted]
Submit #857924 / VDB-380023
Submit #857923: django-oauth django-oauth-toolkit 3.3.0 at commit ddec25b491e52d7f4a1e2cf13a436ffddcf6c782 CWE-613 Insufficient Session Expiration / CWE-287 Improper Authe [Duplicate]
Submit #857923 / VDB-380022
Submit #857897: django-oauth django-oauth-toolkit 3.3.0 at commit ddec25b491e52d7f4a1e2cf13a436ffddcf6c782 CWE-613 Insufficient Session Expiration [Accepted]
Submit #857897 / VDB-380022
Submit #857799: pluck pluck-cms <= 4.7.21-dev Cross-Site Request Forgery [Duplicate]
Submit #857799 / VDB-60279
Submit #857798: pluck pluck-cms <= 4.7.21 dev Improper Neutralization of Alternate XSS Syntax [Accepted]
Submit #857798 / VDB-380021
Submit #857797: pluck pluck-cms 4.7.20 Unrestricted Upload [Duplicate]
Submit #857797 / VDB-131138
Submit #857784: zevorn rt-claw 36d128f72afa0b9d40a21bcd6069b0c193a58f82 (unreleased main, post-v0.2.0) Remote Code Execution via Unsafe Tool Auto-Approval (CWE-94) [Accepted]
Submit #857784 / VDB-380020
Submit #857766: sourcecodester Class and Exam Timetabling System V1.0 cross site scripting [Accepted]
Submit #857766 / VDB-380019
Submit