Submit #692205: https://github.com/nocobase https://github.com/nocobase/nocobase Latest Authorization Bypass [Accepted]
Submit #692205 / VDB-334033
Vuldb Submit
Submit #692169: RAREPROB SOLUTIONS PRIVATE LIMITED HD Video Player All Formats APP(com.rocks.music.videoplayer) V12.1.372 Path Traversal [Accepted]
Submit #692169 / VDB-334032
Submit #692125: yohann( https://github.com/Yohann0617 ) oci-helper <=V3.2.4 Directory/Path Traversal [Accepted]
Submit #692125 / VDB-334031
Submit #692107: moxi159753 mogu_blog_v2 <=v5.2 Path Traversal / Zip Slip [Accepted]
Submit #692107 / VDB-333825
Submit #692106: moxi159753 mogu_blog_v2 <=v5.2 Unrestricted Upload of File with Dangerous Type [Accepted]
Submit #692106 / VDB-333824
Submit #692105: moxi159753 mogu_blog_v2 <=v5.2 Server-Side Request Forgery (SSRF) [Accepted]
Submit #692105 / VDB-333823
Submit #692104: moxi159753 mogu_blog_v2 <=v5.2 Broken Access Control / Missing Authorization [Accepted]
Submit #692104 / VDB-333822
Submit #692084: WebStack-Guns Project WebStack-Guns 1.0 SQL Injection [Accepted]
Submit #692084 / VDB-333821
Submit #692080: WebStack-Guns Project (GitHub organization jsnjfz) WebStack-Guns 1.0 (latest master) Path Traversal / Arbitrary File Read (CWE-22) [Accepted]
Submit #692080 / VDB-333820
Submit #692077: AIAS Project AIAS Training Platform <= 0.23.0 Zip Slip / Path Traversal leading to arbitrary file write [Duplicate]
Submit #692077 / VDB-303688
Submit #692074: AIAS Project (aias.top) AIAS Training & API Platform <= 0.23.0 Server-Side Request Forgery / Local File Read via unrestricted U [Duplicate]
Submit #692074 / VDB-303690
Submit #692069: orionsec (project owner of Orion-ops) Orion-ops (server component) <= master commit 5925824997a3109651bbde07460958a7be249ed1 Server-Side Request Forgery (SSRF) [Accepted]
Submit #692069 / VDB-333819
Submit #692068: orionsec Orion-ops (server component) <= master commit 5925824997a3109651bbde07460958a7be249ed1 Improper Authorization / Horizontal Privilege Escalation [Accepted]
Submit #692068 / VDB-333818
Submit #692066: orionsec Orion-ops (server component) <= master commit 5925824997a3109651bbde07460958a7be249ed1 Improper Access Control / Information Disclosure (exposed machin [Accepted]
Submit #692066 / VDB-333817
Submit #692061: NutzBoot project (Nutz community) NutzBoot (Web3j starter + demo module) NutzBoot 2.6.0-SNAPSHOT Improper Access Control (Unauthenticated transaction API) [Accepted]
Submit #692061 / VDB-333816
Submit #692053: Nutz Framework NutzBoot 2.6.0-SNAPSHOT Code Execution (Unauthenticated Java Deserialization) [Accepted]
Submit #692053 / VDB-333815
Submit #692050: NutzBoot project NutzBoot NutzBoot 2.6.0-SNAPSHOT Information Disclosure (Wallet password leakage) [Accepted]
Submit #692050 / VDB-333814
Submit #691857: MediaCrush 1.0 Improper Neutralization of HTTP Headers for Scripting Syntax [Accepted]
Submit #691857 / VDB-333813
Submit #691839: restaurant-website-php-mysql-master web 1 XSS vulnerability [Accepted]
Submit #691839 / VDB-333812
Submit #691942: Adslr NBR1005GPEV2 250814-r037c Remote code execution [Accepted]
Submit #691942 / VDB-333811
Submit