Submit #1033307: Fengoffice Feng Office 3.11.8.0 Code Injection [Accepted]
Submit #1033307 / VDB-432804
Vuldb Submit
Please support the site operations by clicking ads.
Submit #1028582: Convene (https://azeusconvene.com) Azeus Convene Board Management Portal v7.0.2.7_3 (p72) Full Account Takeover [Accepted]
Submit #1028582 / VDB-432803
Submit #1028013: Jinher OA V1.0 SQL Injection [Accepted]
Submit #1028013 / VDB-432651
Submit #1027417: FlowCI flow-core-x v1.23.01 Path Traversal [Accepted]
Submit #1027417 / VDB-432650
Submit #1027414: FlowCI flow-core-x v1.23.01 zipslip path traversal [Accepted]
Submit #1027414 / VDB-432649
Submit #1027401: FlowCI flow-core-x v1.23.01 remote code execution [Accepted]
Submit #1027401 / VDB-432648
Submit #1015958: DataLinkDC dinky v1.2.5 (commit ce7678e) Path Traversal [Accepted]
Submit #1015958 / VDB-432647
Submit #1033757: TOTOLINK CA300-PoE CA300-PoE_Firmware V6.2c.884 Buffer Overflow [Accepted]
Submit #1033757 / VDB-432115
Submit #1033756: TOTOLINK CA300-PoE CA300-PoE_Firmware V6.2c.884 Buffer Overflow [Accepted]
Submit #1033756 / VDB-432114
Submit #1033755: TOTOLINK CA300-PoE CA300-PoE_Firmware V6.2c.884 Buffer Overflow [Accepted]
Submit #1033755 / VDB-432113
Submit #1033754: TOTOLINK CA300-PoE CA300-PoE_Firmware V6.2c.884 Buffer Overflow [Accepted]
Submit #1033754 / VDB-432112
Submit #1035492: FIT2CLOUD DataEase (the vulnerable SVG validator lives in the in-repo `core/core-backend` static-resource server) audited at released build 2.10.26, commit `0a9eaf6af890bbc91ebcd71a8a8013f917846245` (runtime: production `CoreApplication…
Submit #1035492 / VDB-432071
Submit #1035491: FIT2CLOUD DataEase (open-source BI platform; vulnerable classes in the in-repo `sdk/common` auth filter and `core/core-backend` static-resource server, bundled into the community distribution) audited at released build 2.10.26, commit …
Submit #1035491 / VDB-432070
Submit #1035483: FIT2CLOUD DataEase (open-source BI platform; vulnerable classes in the in-repo `core/core-backend` module bundled into the community distribution) 2.x <= 2.10.26 and 3.x <= 3.0.0 (the operator-logic concatenation is byte-identical in the…
Submit #1035483 / VDB-432069
Submit #1035343: ESEngine Reasonix ≤v1.18.0 Permission Bypass [Accepted]
Submit #1035343 / VDB-432064
Submit #1035172: GitHub Food Ordering System 2022–2024 Directory Traversal [Accepted]
Submit #1035172 / VDB-432063
Submit #1035173: Tenda AC19 V16.03.10.07 Heap-Based Buffer Overflow (CWE-122) [Accepted]
Submit #1035173 / VDB-432038
Submit #1034869: gihub.com/zhblue hustoj >=24.09.10 && <=26.08.19 Horizontal and Vertical Privilege Escalation in threadadmin.php [Duplicate]
Submit #1034869 / VDB-430292
Submit #1033798: OpenBMB Internet of Agents(IoA) 9d78e88 Excessive Iteration [Accepted]
Submit #1033798 / VDB-432034
Submit #1033797: OpenBMB Internet of Agents(IoA) 9d78e88 Improper Input Validation [Accepted]
Submit #1033797 / VDB-432033
Submit