Submit #1035641: fushengqian fuint up to cb498ad2 Improper Access Controls [Accepted]
Submit #1035641 / VDB-432897
Vuldb Submit
Please support the site operations by clicking ads.
Submit #1035620: D-Link DIR-878 1.20B05 Path Traversal [Accepted]
Submit #1035620 / VDB-432896
Submit #1035619: D-Link DIR-878 1.20B05 Stack-based Buffer Overflow [Accepted]
Submit #1035619 / VDB-432895
Submit #1035618: D-Link DIR-878 1.20B05 Stack-based Buffer Overflow [Accepted]
Submit #1035618 / VDB-432894
Submit #1035617: D-Link DIR-878 1.20B05 Stack-based Buffer Overflow [Accepted]
Submit #1035617 / VDB-432893
Submit #1035616: D-Link DIR-878 1.20B05 Heap-based Buffer Overflow [Accepted]
Submit #1035616 / VDB-432892
Submit #1035494: DataLinkDC dinky (dinky-admin) up to and including released tag v1.2.5 (reviewed at commit ce7678eaa13722541f7d1eeda7ffbf8c9f753e20; v1.2.5 was the newest release at the time of review) Server-Side Request Forgery with interaction/read…
Submit #1035494 / VDB-432891
Submit #1035490: Chat2DB Chat2DB community server (chat2db-community) audited at commit `2905d33a2` (git describe `v5.3.6-109-g2905d33a2`); official source build; the service passes the matched table name into the pinned `com.baomidou:mybatis-plus…
Submit #1035490 / VDB-432889
Submit #1035489: kekingcn kkFileView v5.0.2 (reviewed release commit `c4288f7e`, official-baseline jar `server/target/kkFileView-5.0.2.jar`); the `X-Base-Url` header precedence has been in place since 2021 and the same filter pair is still present on…
Submit #1035489 / VDB-432888
Submit #1035488: JEECG JimuReport 2.5.1 bundled in JeecgBoot 3.9.5 (`org.jeecgframework.jimureport:jimureport-spring-boot4-starter`) JeecgBoot 3.9.5 with bundled `org.jeecgframework.jimureport:jimureport-spring-boot4-starter` 2.5.1; reviewed at commit …
Submit #1035488 / VDB-432887
Submit #1035487: JEECG JimuBI (bundled in JeecgBoot 3.9.5 as `org.jeecgframework.jimureport:jimubi-spring-boot4-starter` 2.5.0) JeecgBoot 3.9.5 with bundled `org.jeecgframework.jimureport:jimubi-spring-boot4-starter:2.5.0`; reviewed at commit …
Submit #1035487 / VDB-432886
Submit #1035485: floci-io Floci (local AWS emulator) 2.0.1 (the released tag `2.0.1` carries the same `DeliveryStreamDescription`, `FirehoseService`, `S3Service` and `S3CfnProvisioner` code; reviewed at commit a5ab1672f9305299e3b7a32d67ce12b1d89f1199,…
Submit #1035485 / VDB-432813
Submit #1035484: floci-io Floci (local AWS emulator) 2.0.1 (the released tag `2.0.1` carries the same `BuildspecParser.parseArtifacts` and `CodeBuildRunner.uploadArtifacts` code; reviewed at commit a5ab1672f9305299e3b7a32d67ce12b1d89f1199, the 2.0.1 head…
Submit #1035484 / VDB-432812
Submit #1035482: conductor-oss Conductor up to v3.33.0-rc5 (unfixed as of 2026-09-18; latest stable v3.32.4); runtime proof at released tag v3.32.4, commit 088de237a185caaeb669035a6d75de65d36cab5a (2026-09-10) Server-Side Request Forgery with response…
Submit #1035482 / VDB-432811
Submit #1035481: Dianping (Meituan) CAT (Central Application Tracking), module `cat-home` (report web UI) 3.0.0 (released tag, same code path) and the 4.0-RC1 development line; reviewed at commit e815e74d4c2dd74edac831241f1253fcc7d25381 Cross-site…
Submit #1035481 / VDB-432810
Submit #1035480: Dianping (Meituan) CAT (Central Application Tracking), module `cat-home` 3.0.0 (released tag, same `redirect()` code) and the 4.0-RC1 development line; reviewed at commit e815e74d4c2dd74edac831241f1253fcc7d25381 URL redirection to…
Submit #1035480 / VDB-432809
Submit #1035479: erupts Erupt (erupt-report module, open-sourced in 2.1.0, formerly the commercial erupt-BI) master `v2.3.0` (source snapshot 2026-10-03; self-built `erupt-sample-2.3.0`, Spring Boot 3.5.16 / Java 17, default H2); the `ReportService…
Submit #1035479 / VDB-432808
Submit #1034853: yungifez Skuul School Management System 2.6.5 Improper Access Controls (Missing Authorization) in GraduationCo [Accepted]
Submit #1034853 / VDB-432807
Submit #1033844: moto 5.2.4.dev Execution with Unnecessary Privileges [Accepted]
Submit #1033844 / VDB-432806
Submit #1033342: Fengoffice Feng Office 3.11.8.0 Server-Side Request Forgery [Accepted]
Submit #1033342 / VDB-432805
Submit