Submit #1039019: Chengdu Feiyuxing Technology Co., Ltd. (成都飞鱼星科技; adslr.com) VW2100 V1.0 / VEC10GP V1.0 (VROS) B-MB3W202-210825-r11775 Command Injection [Accepted]
Submit #1039019 / VDB-433009
Vuldb Submit
Please support the site operations by clicking ads.
Submit #1038992: wummel patool 4.1.0 Improper Link Resolution (CWE-59) [Accepted]
Submit #1038992 / VDB-433008
Submit #1039255: https://github.com/webtorrent webtorrent 2.8.5 Absolute Path Traversal [Accepted]
Submit #1039255 / VDB-432939
Submit #1039046: JeeWMS 3.7 Path Traversal [Duplicate]
Submit #1039046 / VDB-304799
Submit #1038456: itsourcecode Airline Reservation System V1.0 SQL Injection [Accepted]
Submit #1038456 / VDB-432938
Submit #1038438: Chengdu Feiyuxing Technology Co., Ltd. (成都飞鱼星科技; adslr.com) VW2100 V1.0 / VEC10GP V1.0 (VROS) B-MB3W202-210825-r11775 and earlier builds Command Injection [Accepted]
Submit #1038438 / VDB-432937
Submit #1038400: BillionMail <=v4.9 Authenticated RCE [Accepted]
Submit #1038400 / VDB-432929
Submit #1038185: Zhuhai Pantum Electronics BP5100DW printer Firmware 3.A.4.7 Unauthenticated disclosure of device configuration and credentials via /shtml/omDB.shtml [Accepted]
Submit #1038185 / VDB-432924
Submit #1038184: Intelbras SG 2404 PoE L2+ managed switch Firmware 1.00.70, 1.00.72 (hardware B1) Authentication bypass in web management interface allows unauthenticated execution of privileged CLI commands via /EXCU_SHELL [Accepted]
Submit #1038184 / VDB-432923
Submit #1038160: beikeshop BeikeShop <= 2.0.0.31 Improper Enforcement of Behavioral Workflow [Accepted]
Submit #1038160 / VDB-432922
Submit #1038068: siteserver SiteServer CMS (SSCMS) 7.4.0 Improper Restriction of Excessive Authentication Attempts [Accepted]
Submit #1038068 / VDB-432921
Submit #1036006: https://github.com/chenyme/grok2api/issues/1066 grok2api v3.1.6 (commit 906b9493b099d192381c698d4e320fafeccb851c) Incorrect Authorization [Accepted]
Submit #1036006 / VDB-432920
Submit #1035945: https://github.com/logseq logseq 2.0.1 Local Sensitive Logic exposure lead to Command Execution [Accepted]
Submit #1035945 / VDB-432919
Submit #1036005: DataLinkDC Dinky <=1.2.5 Path Traversal in CatalogueController upload [Accepted]
Submit #1036005 / VDB-432918
Submit #1035915: SourceCodestere Simple CRUD using PHP and FPDF V1.0 SQL Injection [Accepted]
Submit #1035915 / VDB-432917
Submit #1035914: sourceCodester Online Leave Management System V1.0 Cross Site Scripting [Accepted]
Submit #1035914 / VDB-432916
Submit #1035650: fushengqian fuintCatering up to 06e744dd Improper Access Controls [Accepted]
Submit #1035650 / VDB-432901
Submit #1035643: fushengqian fuintCatering up to 06e744dd Improper Access Controls [Accepted]
Submit #1035643 / VDB-432900
Submit #1035667: fushengqian fuint & fuintCatering up to cb498ad2 Improper Validation [Accepted]
Submit #1035667 / VDB-432899
Submit #1035644: fushengqian fuint up to cb498ad2 Improper Validation [Accepted]
Submit #1035644 / VDB-432898
Submit