Submit #1014294: BKWLD Decoy 5.11.1 Improper Access Control / Authorization Bypass [Accepted]
Submit #1014294 / VDB-426379
Vuldb Submit
Please support the site operations by clicking ads.
Submit #1013917: ggml-org llama.cpp 2ed93db47 and earlier (fixed in PR #29992) CWE-617 (Reachable Assertion) [Accepted]
Submit #1013917 / VDB-426361
Submit #1013651: FastStone Image Viewer 8.5 Out-of-Bounds Read [Accepted]
Submit #1013651 / VDB-426360
Submit #1013221: Omega Solution LLC Restro POS Latest version as of July 2026 Business Logic Price Manipulation [Accepted]
Submit #1013221 / VDB-426359
Submit #1013220: bdtaks Garage 24 Latest version as of 2025-10-16 Stored HTML Injection [Accepted]
Submit #1013220 / VDB-426354
Submit #1013219: bdtaks Garage 24 Latest version as of 2025-10-16 Improper Authorization / Broken Access Control [Accepted]
Submit #1013219 / VDB-426353
Submit #1013130: Akubela (by Akuvox) HyPanel PS51 (Smart Home Control Panel / Intercom Gateway) 51.130.40.26 Authentication Bypass Using Alternate Channel [Accepted]
Submit #1013130 / VDB-426335
Submit #1013119: 2k Games Sid Meier’s Civilization VI 1.0.12.68 Exposed Dangerous Method or Function [Accepted]
Submit #1013119 / VDB-426334
Submit #1013075: Sunwood-ai-labs github-kanban-mcp-server (npm: @sunwood-ai-labs/github-kanban-mcp-server) 0a4f9f92a13a201fe31cda310da1c95d63876579 OS Command Injection (CWE-78) [Accepted]
Submit #1013075 / VDB-426333
Submit #1012891: DeepSeek deepseek-harness（@deepseek-ai/dsh，DeepSeek Harness） 0.2.0-rc.2（verified in source and reproduced on the live instance） Authentication Bypass [Accepted]
Submit #1012891 / VDB-426332
Submit #1012736: DeepSeek deepseek-harness（@deepseek-ai/dsh，DeepSeek Harness） 0.2.0-rc.2 Remote Code Execution [Accepted]
Submit #1012736 / VDB-426331
Submit #1011582: iFlytek astron-agent v1.1.1, v1.1.2 Authorization Bypass Through User-Controlled Key [Accepted]
Submit #1011582 / VDB-426315
Submit #1011581: iFlytek astron-agent v1.1.2, main b4f8ed57460cbfb32016a4afd3fd7212987d33c3 Incomplete List of Disallowed Inputs [Accepted]
Submit #1011581 / VDB-426314
Submit #1011370: https://kameleo.io/ Kameleo 5.0.1.26 Sensitive Information Disclosure [Accepted]
Submit #1011370 / VDB-426309
Submit #1011369: https://kameleo.io/ Kameleo 5.0.1.26 Exposure of Sensitive Information due to the unauthentication [Accepted]
Submit #1011369 / VDB-426308
Submit #1011321: https://kameleo.io/ Kameleo 5.0.1.26 exposure of the user cookie [Accepted]
Submit #1011321 / VDB-426307
Submit #1011319: https://kameleo.io/ Kameleo 5.0.1.26 Exposure of profiles due to unauthentication [Accepted]
Submit #1011319 / VDB-426306
Submit #1011318: https://kameleo.io/ Kameleo 5.0.1.26 SSRF [Accepted]
Submit #1011318 / VDB-426305
Submit #1011308: AllenAI AllenNLP 2.10.1 Use of Externally-Controlled Input to Select Classes or Code [Accepted]
Submit #1011308 / VDB-426304
Submit #1011003: jizhicms 2.4.5 Improper Authorization [Accepted]
Submit #1011003 / VDB-426303
Submit