Search criteria
14691 vulnerabilities
CVE-2026-11437 (GCVE-0-2026-11437)
Vulnerability from cvelistv5 – Published: 2026-06-06 16:30 – Updated: 2026-06-06 16:30
VLAI
Title
perfree go-fastdfs-web Installation Endpoint checkServer server-side request forgery
Summary
A flaw has been found in perfree go-fastdfs-web up to 1.3.7. Affected is the function checkServer of the file /install/checkServer of the component Installation Endpoint. Executing a manipulation can lead to server-side request forgery. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
CWE
- CWE-918 - Server-Side Request Forgery
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/369017 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/369017/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-11437 | third-party-advisory |
| https://vuldb.com/submit/822726 | third-party-advisory |
| https://www.notion.so/Server-Side-Request-Forgery… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| perfree | go-fastdfs-web |
Affected:
1.3.0
Affected: 1.3.1 Affected: 1.3.2 Affected: 1.3.3 Affected: 1.3.4 Affected: 1.3.5 Affected: 1.3.6 Affected: 1.3.7 cpe:2.3:a:perfree:go-fastdfs-web:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:perfree:go-fastdfs-web:*:*:*:*:*:*:*:*"
],
"modules": [
"Installation Endpoint"
],
"product": "go-fastdfs-web",
"vendor": "perfree",
"versions": [
{
"status": "affected",
"version": "1.3.0"
},
{
"status": "affected",
"version": "1.3.1"
},
{
"status": "affected",
"version": "1.3.2"
},
{
"status": "affected",
"version": "1.3.3"
},
{
"status": "affected",
"version": "1.3.4"
},
{
"status": "affected",
"version": "1.3.5"
},
{
"status": "affected",
"version": "1.3.6"
},
{
"status": "affected",
"version": "1.3.7"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "din4 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A flaw has been found in perfree go-fastdfs-web up to 1.3.7. Affected is the function checkServer of the file /install/checkServer of the component Installation Endpoint. Executing a manipulation can lead to server-side request forgery. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-918",
"description": "Server-Side Request Forgery",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-06T16:30:12.201Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-369017 | perfree go-fastdfs-web Installation Endpoint checkServer server-side request forgery",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/369017"
},
{
"name": "VDB-369017 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/369017/cti"
},
{
"name": "CVE-2026-11437 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-11437"
},
{
"name": "Submit #822726 | perfree go-fastdfs-web \u22641.3.7 Server-Side Request Forgery",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/822726"
},
{
"tags": [
"exploit"
],
"url": "https://www.notion.so/Server-Side-Request-Forgery-SSRF-in-go-fastdfs-web-Installation-Endpoint-35aea92a3c41806485ffeeac7e18126a"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-05T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-06T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-06T00:17:55.000Z",
"value": "VulDB entry last update"
}
],
"title": "perfree go-fastdfs-web Installation Endpoint checkServer server-side request forgery"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-11437",
"datePublished": "2026-06-06T16:30:12.201Z",
"dateReserved": "2026-06-05T22:12:51.217Z",
"dateUpdated": "2026-06-06T16:30:12.201Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11436 (GCVE-0-2026-11436)
Vulnerability from cvelistv5 – Published: 2026-06-06 15:45 – Updated: 2026-06-06 15:45
VLAI
Title
Mage AI Sign-in Flow index.tsx useMutation cross site scripting
Summary
A vulnerability was detected in Mage AI up to 0.9.79. This impacts the function useMutation of the file mage_ai/frontend/components/Sessions/SignForm/index.tsx of the component Sign-in Flow. Performing a manipulation of the argument query.redirect_url results in cross site scripting. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/369016 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/369016/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-11436 | third-party-advisory |
| https://vuldb.com/submit/822710 | third-party-advisory |
| https://gist.github.com/TrebledJ/8af312cf797391ef… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| n/a | Mage AI |
Affected:
0.9.0
Affected: 0.9.1 Affected: 0.9.2 Affected: 0.9.3 Affected: 0.9.4 Affected: 0.9.5 Affected: 0.9.6 Affected: 0.9.7 Affected: 0.9.8 Affected: 0.9.9 Affected: 0.9.10 Affected: 0.9.11 Affected: 0.9.12 Affected: 0.9.13 Affected: 0.9.14 Affected: 0.9.15 Affected: 0.9.16 Affected: 0.9.17 Affected: 0.9.18 Affected: 0.9.19 Affected: 0.9.20 Affected: 0.9.21 Affected: 0.9.22 Affected: 0.9.23 Affected: 0.9.24 Affected: 0.9.25 Affected: 0.9.26 Affected: 0.9.27 Affected: 0.9.28 Affected: 0.9.29 Affected: 0.9.30 Affected: 0.9.31 Affected: 0.9.32 Affected: 0.9.33 Affected: 0.9.34 Affected: 0.9.35 Affected: 0.9.36 Affected: 0.9.37 Affected: 0.9.38 Affected: 0.9.39 Affected: 0.9.40 Affected: 0.9.41 Affected: 0.9.42 Affected: 0.9.43 Affected: 0.9.44 Affected: 0.9.45 Affected: 0.9.46 Affected: 0.9.47 Affected: 0.9.48 Affected: 0.9.49 Affected: 0.9.50 Affected: 0.9.51 Affected: 0.9.52 Affected: 0.9.53 Affected: 0.9.54 Affected: 0.9.55 Affected: 0.9.56 Affected: 0.9.57 Affected: 0.9.58 Affected: 0.9.59 Affected: 0.9.60 Affected: 0.9.61 Affected: 0.9.62 Affected: 0.9.63 Affected: 0.9.64 Affected: 0.9.65 Affected: 0.9.66 Affected: 0.9.67 Affected: 0.9.68 Affected: 0.9.69 Affected: 0.9.70 Affected: 0.9.71 Affected: 0.9.72 Affected: 0.9.73 Affected: 0.9.74 Affected: 0.9.75 Affected: 0.9.76 Affected: 0.9.77 Affected: 0.9.78 Affected: 0.9.79 cpe:2.3:a:mage_ai:mage_ai:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:mage_ai:mage_ai:*:*:*:*:*:*:*:*"
],
"modules": [
"Sign-in Flow"
],
"product": "Mage AI",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "0.9.0"
},
{
"status": "affected",
"version": "0.9.1"
},
{
"status": "affected",
"version": "0.9.2"
},
{
"status": "affected",
"version": "0.9.3"
},
{
"status": "affected",
"version": "0.9.4"
},
{
"status": "affected",
"version": "0.9.5"
},
{
"status": "affected",
"version": "0.9.6"
},
{
"status": "affected",
"version": "0.9.7"
},
{
"status": "affected",
"version": "0.9.8"
},
{
"status": "affected",
"version": "0.9.9"
},
{
"status": "affected",
"version": "0.9.10"
},
{
"status": "affected",
"version": "0.9.11"
},
{
"status": "affected",
"version": "0.9.12"
},
{
"status": "affected",
"version": "0.9.13"
},
{
"status": "affected",
"version": "0.9.14"
},
{
"status": "affected",
"version": "0.9.15"
},
{
"status": "affected",
"version": "0.9.16"
},
{
"status": "affected",
"version": "0.9.17"
},
{
"status": "affected",
"version": "0.9.18"
},
{
"status": "affected",
"version": "0.9.19"
},
{
"status": "affected",
"version": "0.9.20"
},
{
"status": "affected",
"version": "0.9.21"
},
{
"status": "affected",
"version": "0.9.22"
},
{
"status": "affected",
"version": "0.9.23"
},
{
"status": "affected",
"version": "0.9.24"
},
{
"status": "affected",
"version": "0.9.25"
},
{
"status": "affected",
"version": "0.9.26"
},
{
"status": "affected",
"version": "0.9.27"
},
{
"status": "affected",
"version": "0.9.28"
},
{
"status": "affected",
"version": "0.9.29"
},
{
"status": "affected",
"version": "0.9.30"
},
{
"status": "affected",
"version": "0.9.31"
},
{
"status": "affected",
"version": "0.9.32"
},
{
"status": "affected",
"version": "0.9.33"
},
{
"status": "affected",
"version": "0.9.34"
},
{
"status": "affected",
"version": "0.9.35"
},
{
"status": "affected",
"version": "0.9.36"
},
{
"status": "affected",
"version": "0.9.37"
},
{
"status": "affected",
"version": "0.9.38"
},
{
"status": "affected",
"version": "0.9.39"
},
{
"status": "affected",
"version": "0.9.40"
},
{
"status": "affected",
"version": "0.9.41"
},
{
"status": "affected",
"version": "0.9.42"
},
{
"status": "affected",
"version": "0.9.43"
},
{
"status": "affected",
"version": "0.9.44"
},
{
"status": "affected",
"version": "0.9.45"
},
{
"status": "affected",
"version": "0.9.46"
},
{
"status": "affected",
"version": "0.9.47"
},
{
"status": "affected",
"version": "0.9.48"
},
{
"status": "affected",
"version": "0.9.49"
},
{
"status": "affected",
"version": "0.9.50"
},
{
"status": "affected",
"version": "0.9.51"
},
{
"status": "affected",
"version": "0.9.52"
},
{
"status": "affected",
"version": "0.9.53"
},
{
"status": "affected",
"version": "0.9.54"
},
{
"status": "affected",
"version": "0.9.55"
},
{
"status": "affected",
"version": "0.9.56"
},
{
"status": "affected",
"version": "0.9.57"
},
{
"status": "affected",
"version": "0.9.58"
},
{
"status": "affected",
"version": "0.9.59"
},
{
"status": "affected",
"version": "0.9.60"
},
{
"status": "affected",
"version": "0.9.61"
},
{
"status": "affected",
"version": "0.9.62"
},
{
"status": "affected",
"version": "0.9.63"
},
{
"status": "affected",
"version": "0.9.64"
},
{
"status": "affected",
"version": "0.9.65"
},
{
"status": "affected",
"version": "0.9.66"
},
{
"status": "affected",
"version": "0.9.67"
},
{
"status": "affected",
"version": "0.9.68"
},
{
"status": "affected",
"version": "0.9.69"
},
{
"status": "affected",
"version": "0.9.70"
},
{
"status": "affected",
"version": "0.9.71"
},
{
"status": "affected",
"version": "0.9.72"
},
{
"status": "affected",
"version": "0.9.73"
},
{
"status": "affected",
"version": "0.9.74"
},
{
"status": "affected",
"version": "0.9.75"
},
{
"status": "affected",
"version": "0.9.76"
},
{
"status": "affected",
"version": "0.9.77"
},
{
"status": "affected",
"version": "0.9.78"
},
{
"status": "affected",
"version": "0.9.79"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "trebledj (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in Mage AI up to 0.9.79. This impacts the function useMutation of the file mage_ai/frontend/components/Sessions/SignForm/index.tsx of the component Sign-in Flow. Performing a manipulation of the argument query.redirect_url results in cross site scripting. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 5,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "Cross Site Scripting",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "Code Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-06T15:45:07.089Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-369016 | Mage AI Sign-in Flow index.tsx useMutation cross site scripting",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/369016"
},
{
"name": "VDB-369016 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/369016/cti"
},
{
"name": "CVE-2026-11436 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-11436"
},
{
"name": "Submit #822710 | Mage AI 0.9.79 DOM-Based XSS, Open Redirect",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/822710"
},
{
"tags": [
"exploit"
],
"url": "https://gist.github.com/TrebledJ/8af312cf797391ef7b50b94bb244333a"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-05T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-06T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-06T00:16:16.000Z",
"value": "VulDB entry last update"
}
],
"title": "Mage AI Sign-in Flow index.tsx useMutation cross site scripting"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-11436",
"datePublished": "2026-06-06T15:45:07.089Z",
"dateReserved": "2026-06-05T22:11:12.242Z",
"dateUpdated": "2026-06-06T15:45:07.089Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11435 (GCVE-0-2026-11435)
Vulnerability from cvelistv5 – Published: 2026-06-06 15:15 – Updated: 2026-06-06 15:15
VLAI
Title
Jinher OA nextselectplan.aspx sql injection
Summary
A security vulnerability has been detected in Jinher OA 1.0. This affects an unknown function of the file nextselectplan.aspx. Such manipulation of the argument httpOID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/369015 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/369015/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-11435 | third-party-advisory |
| https://vuldb.com/submit/822114 | third-party-advisory |
| https://github.com/Mr-Elymas/cve_submit/issues/1 | exploitissue-tracking |
Impacted products
Credits
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:jinher:oa:*:*:*:*:*:*:*:*"
],
"product": "OA",
"vendor": "Jinher",
"versions": [
{
"status": "affected",
"version": "1.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Elymas (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in Jinher OA 1.0. This affects an unknown function of the file nextselectplan.aspx. Such manipulation of the argument httpOID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-06T15:15:09.677Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-369015 | Jinher OA nextselectplan.aspx sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/369015"
},
{
"name": "VDB-369015 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/369015/cti"
},
{
"name": "CVE-2026-11435 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-11435"
},
{
"name": "Submit #822114 | Jinher OA V1.0 SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/822114"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/Mr-Elymas/cve_submit/issues/1"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-05T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-06T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-06T00:13:32.000Z",
"value": "VulDB entry last update"
}
],
"title": "Jinher OA nextselectplan.aspx sql injection"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-11435",
"datePublished": "2026-06-06T15:15:09.677Z",
"dateReserved": "2026-06-05T22:08:29.266Z",
"dateUpdated": "2026-06-06T15:15:09.677Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11434 (GCVE-0-2026-11434)
Vulnerability from cvelistv5 – Published: 2026-06-06 14:15 – Updated: 2026-06-06 14:15
VLAI
Title
FluentCMS Blocks Plugin blocks cross site scripting
Summary
A weakness has been identified in FluentCMS 0.0.5. The impacted element is an unknown function of the file /admin/blocks of the component Blocks Plugin. This manipulation causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/369014 | vdb-entry |
| https://vuldb.com/vuln/369014/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-11434 | third-party-advisory |
| https://vuldb.com/submit/821094 | third-party-advisory |
| https://hackmd.io/@noka/BkHdIMFAWx | exploit |
Impacted products
Credits
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:fluentcms:fluentcms:*:*:*:*:*:*:*:*"
],
"modules": [
"Blocks Plugin"
],
"product": "FluentCMS",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "0.0.5"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Karina Gante"
},
{
"lang": "en",
"type": "reporter",
"value": "karinagante (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in FluentCMS 0.0.5. The impacted element is an unknown function of the file /admin/blocks of the component Blocks Plugin. This manipulation causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 2.4,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 2.4,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 3.3,
"vectorString": "AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "Cross Site Scripting",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "Code Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-06T14:15:09.941Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-369014 | FluentCMS Blocks Plugin blocks cross site scripting",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/369014"
},
{
"name": "VDB-369014 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/369014/cti"
},
{
"name": "CVE-2026-11434 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-11434"
},
{
"name": "Submit #821094 | FluentCMS 0.0.5 Cross Site Scripting",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/821094"
},
{
"tags": [
"exploit"
],
"url": "https://hackmd.io/@noka/BkHdIMFAWx"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-05T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-06T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-06T00:12:24.000Z",
"value": "VulDB entry last update"
}
],
"title": "FluentCMS Blocks Plugin blocks cross site scripting"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-11434",
"datePublished": "2026-06-06T14:15:09.941Z",
"dateReserved": "2026-06-05T22:07:20.333Z",
"dateUpdated": "2026-06-06T14:15:09.941Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11413 (GCVE-0-2026-11413)
Vulnerability from cvelistv5 – Published: 2026-06-06 12:45 – Updated: 2026-06-06 12:45
VLAI
Title
JingDong JD Cloud Box AX6600 jdcweb_rpc set_macfilter stack-based overflow
Summary
A security vulnerability has been detected in JingDong JD Cloud Box AX6600 4.5.3.r4546. The impacted element is the function set_macfilter of the file /sbin/jdcweb_rpc. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368970 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/368970/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-11413 | third-party-advisory |
| https://vuldb.com/submit/820025 | third-party-advisory |
| http://cdn2.v50to.cc/JDcloud-AX6600_overflow.zip | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| JingDong | JD Cloud Box AX6600 |
Affected:
4.5.3.r4546
cpe:2.3:a:jingdong:jd_cloud_box_ax6600:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:jingdong:jd_cloud_box_ax6600:*:*:*:*:*:*:*:*"
],
"product": "JD Cloud Box AX6600",
"vendor": "JingDong",
"versions": [
{
"status": "affected",
"version": "4.5.3.r4546"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "CookedMelon (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in JingDong JD Cloud Box AX6600 4.5.3.r4546. The impacted element is the function set_macfilter of the file /sbin/jdcweb_rpc. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 8.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 9,
"vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "Stack-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "Memory Corruption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-06T12:45:11.552Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368970 | JingDong JD Cloud Box AX6600 jdcweb_rpc set_macfilter stack-based overflow",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/368970"
},
{
"name": "VDB-368970 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368970/cti"
},
{
"name": "CVE-2026-11413 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-11413"
},
{
"name": "Submit #820025 | JD Cloud AX6600 JDCOS-4.5.3.r4546 Stack-based Buffer Overflow",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/820025"
},
{
"tags": [
"exploit"
],
"url": "http://cdn2.v50to.cc/JDcloud-AX6600_overflow.zip"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-05T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-05T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-05T20:45:50.000Z",
"value": "VulDB entry last update"
}
],
"title": "JingDong JD Cloud Box AX6600 jdcweb_rpc set_macfilter stack-based overflow"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-11413",
"datePublished": "2026-06-06T12:45:11.552Z",
"dateReserved": "2026-06-05T18:40:46.769Z",
"dateUpdated": "2026-06-06T12:45:11.552Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11412 (GCVE-0-2026-11412)
Vulnerability from cvelistv5 – Published: 2026-06-06 11:00 – Updated: 2026-06-06 11:00
VLAI
Title
Jinher OA GetFormSn.aspx sql injection
Summary
A weakness has been identified in Jinher OA C6. The affected element is an unknown function of the file /C6/JHSoft.Web.ModuleCount/GetFormSn.aspx. Executing a manipulation of the argument queryID can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368969 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/368969/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-11412 | third-party-advisory |
| https://vuldb.com/submit/819943 | third-party-advisory |
| https://github.com/MichaelZhuang521/cve/issues/3 | exploitissue-tracking |
Impacted products
Credits
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:jinher:oa:*:*:*:*:*:*:*:*"
],
"product": "OA",
"vendor": "Jinher",
"versions": [
{
"status": "affected",
"version": "C6"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "MichaelChong (VulDB User)"
},
{
"lang": "en",
"type": "analyst",
"value": "MichaelChong (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in Jinher OA C6. The affected element is an unknown function of the file /C6/JHSoft.Web.ModuleCount/GetFormSn.aspx. Executing a manipulation of the argument queryID can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-06T11:00:12.400Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368969 | Jinher OA GetFormSn.aspx sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/368969"
},
{
"name": "VDB-368969 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368969/cti"
},
{
"name": "CVE-2026-11412 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-11412"
},
{
"name": "Submit #819943 | Beijing Jinhe Network Co., LTD Jin and OA C6 SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/819943"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/MichaelZhuang521/cve/issues/3"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-05T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-05T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-06T08:55:19.000Z",
"value": "VulDB entry last update"
}
],
"title": "Jinher OA GetFormSn.aspx sql injection"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-11412",
"datePublished": "2026-06-06T11:00:12.400Z",
"dateReserved": "2026-06-05T18:38:42.901Z",
"dateUpdated": "2026-06-06T11:00:12.400Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11411 (GCVE-0-2026-11411)
Vulnerability from cvelistv5 – Published: 2026-06-06 10:45 – Updated: 2026-06-06 10:45
VLAI
Title
iAI Lab PDF AI App chatpdf.pro getExternalCacheDir path traversal
Summary
A security flaw has been discovered in iAI Lab PDF AI App 4.21.0 on Android. Impacted is the function getExternalCacheDir of the component chatpdf.pro. Performing a manipulation of the argument _display_name results in path traversal. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
CWE
- CWE-22 - Path Traversal
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368968 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/368968/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-11411 | third-party-advisory |
| https://vuldb.com/submit/818818 | third-party-advisory |
| https://github.com/actuator/chatpdf.pro | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| iAI Lab | PDF AI App |
Affected:
4.21.0
cpe:2.3:a:iai_lab:pdf_ai_app:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:iai_lab:pdf_ai_app:*:*:*:*:*:*:*:*"
],
"modules": [
"chatpdf.pro"
],
"product": "PDF AI App",
"vendor": "iAI Lab",
"versions": [
{
"status": "affected",
"version": "4.21.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Actuator (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in iAI Lab PDF AI App 4.21.0 on Android. Impacted is the function getExternalCacheDir of the component chatpdf.pro. Performing a manipulation of the argument _display_name results in path traversal. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 3.2,
"vectorString": "AV:L/AC:L/Au:S/C:N/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "Path Traversal",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-06T10:45:07.495Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368968 | iAI Lab PDF AI App chatpdf.pro getExternalCacheDir path traversal",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/368968"
},
{
"name": "VDB-368968 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368968/cti"
},
{
"name": "CVE-2026-11411 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-11411"
},
{
"name": "Submit #818818 | iAI Lab PDF AI: Podcast, Notes, Slides Version 4.21.0 (chatpdf.pro) Path Traversal",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/818818"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/actuator/chatpdf.pro"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-05T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-05T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-05T20:42:27.000Z",
"value": "VulDB entry last update"
}
],
"title": "iAI Lab PDF AI App chatpdf.pro getExternalCacheDir path traversal"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-11411",
"datePublished": "2026-06-06T10:45:07.495Z",
"dateReserved": "2026-06-05T18:37:23.840Z",
"dateUpdated": "2026-06-06T10:45:07.495Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11408 (GCVE-0-2026-11408)
Vulnerability from cvelistv5 – Published: 2026-06-06 10:30 – Updated: 2026-06-06 10:30 X_Open Source
VLAI
Title
vertex-app vertex Log Viewer Endpoint LogMod.js os command injection
Summary
A vulnerability was identified in vertex-app vertex up to 2026.02.12. This issue affects some unknown processing of the file app/model/LogMod.js of the component Log Viewer Endpoint. Such manipulation of the argument req.query leads to os command injection. The attack can be executed remotely. The exploit is publicly available and might be used. The name of the patch is 805d82e7100d49b79b3beb1b9420e8e458987198. It is best practice to apply a patch to resolve this issue.
Severity
Assigner
References
8 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368967 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/368967/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-11408 | third-party-advisory |
| https://vuldb.com/submit/818442 | third-party-advisory |
| https://gist.github.com/menelausx/e632faba4014474… | related |
| https://drive.google.com/drive/folders/1DO-kB1eUo… | exploit |
| https://github.com/vertex-app/vertex/commit/805d8… | patch |
| https://github.com/vertex-app/vertex/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| vertex-app | vertex |
Affected:
2026.02.0
Affected: 2026.02.1 Affected: 2026.02.2 Affected: 2026.02.3 Affected: 2026.02.4 Affected: 2026.02.5 Affected: 2026.02.6 Affected: 2026.02.7 Affected: 2026.02.8 Affected: 2026.02.9 Affected: 2026.02.10 Affected: 2026.02.11 Affected: 2026.02.12 cpe:2.3:a:vertex-app:vertex:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:vertex-app:vertex:*:*:*:*:*:*:*:*"
],
"modules": [
"Log Viewer Endpoint"
],
"product": "vertex",
"vendor": "vertex-app",
"versions": [
{
"status": "affected",
"version": "2026.02.0"
},
{
"status": "affected",
"version": "2026.02.1"
},
{
"status": "affected",
"version": "2026.02.2"
},
{
"status": "affected",
"version": "2026.02.3"
},
{
"status": "affected",
"version": "2026.02.4"
},
{
"status": "affected",
"version": "2026.02.5"
},
{
"status": "affected",
"version": "2026.02.6"
},
{
"status": "affected",
"version": "2026.02.7"
},
{
"status": "affected",
"version": "2026.02.8"
},
{
"status": "affected",
"version": "2026.02.9"
},
{
"status": "affected",
"version": "2026.02.10"
},
{
"status": "affected",
"version": "2026.02.11"
},
{
"status": "affected",
"version": "2026.02.12"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "JasperX (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in vertex-app vertex up to 2026.02.12. This issue affects some unknown processing of the file app/model/LogMod.js of the component Log Viewer Endpoint. Such manipulation of the argument req.query leads to os command injection. The attack can be executed remotely. The exploit is publicly available and might be used. The name of the patch is 805d82e7100d49b79b3beb1b9420e8e458987198. It is best practice to apply a patch to resolve this issue."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "OS Command Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-77",
"description": "Command Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-06T10:30:10.757Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368967 | vertex-app vertex Log Viewer Endpoint LogMod.js os command injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/368967"
},
{
"name": "VDB-368967 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368967/cti"
},
{
"name": "CVE-2026-11408 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-11408"
},
{
"name": "Submit #818442 | vertex-app vertex up to v2026.02.12 OS Command Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/818442"
},
{
"tags": [
"related"
],
"url": "https://gist.github.com/menelausx/e632faba4014474fcef6a1f541ca3e4e"
},
{
"tags": [
"exploit"
],
"url": "https://drive.google.com/drive/folders/1DO-kB1eUoB1CksJ_ZKzpUaX0kp5Rgm_T?usp=sharing"
},
{
"tags": [
"patch"
],
"url": "https://github.com/vertex-app/vertex/commit/805d82e7100d49b79b3beb1b9420e8e458987198"
},
{
"tags": [
"product"
],
"url": "https://github.com/vertex-app/vertex/"
}
],
"tags": [
"x_open-source"
],
"timeline": [
{
"lang": "en",
"time": "2026-06-05T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-05T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-05T20:39:01.000Z",
"value": "VulDB entry last update"
}
],
"title": "vertex-app vertex Log Viewer Endpoint LogMod.js os command injection"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-11408",
"datePublished": "2026-06-06T10:30:10.757Z",
"dateReserved": "2026-06-05T18:33:57.349Z",
"dateUpdated": "2026-06-06T10:30:10.757Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11406 (GCVE-0-2026-11406)
Vulnerability from cvelistv5 – Published: 2026-06-06 09:15 – Updated: 2026-06-06 09:15
VLAI
Title
GL.iNet MT3000 OpenVPN Client Import Workflow ovpnclient.sh command injection
Summary
A vulnerability was determined in GL.iNet MT3000 up to 4.4.5. This vulnerability affects unknown code of the file ovpnclient.sh of the component OpenVPN Client Import Workflow. This manipulation causes command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. Upgrading to version 4.9.0_beta3-1012-0513-1778656146 is able to resolve this issue. You should upgrade the affected component. The vendor confirms: "This issue has been addressed by implementing malicious checks on OpenVPN configuration files to prevent command injection attacks carried through malicious configuration files."
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368966 | vdb-entry |
| https://vuldb.com/vuln/368966/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-11406 | third-party-advisory |
| https://vuldb.com/submit/820049 | third-party-advisory |
| https://github.com/StrTzz123/iot_vul/tree/main/GL… | exploit |
| https://fw.gl-inet.cn/firmware/mt3000/testing/mt3… | patch |
Impacted products
Credits
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:o:gl-inet:mt3000_firmware:*:*:*:*:*:*:*:*"
],
"modules": [
"OpenVPN Client Import Workflow"
],
"product": "MT3000",
"vendor": "GL.iNet",
"versions": [
{
"status": "affected",
"version": "4.4.0"
},
{
"status": "affected",
"version": "4.4.1"
},
{
"status": "affected",
"version": "4.4.2"
},
{
"status": "affected",
"version": "4.4.3"
},
{
"status": "affected",
"version": "4.4.4"
},
{
"status": "affected",
"version": "4.4.5"
},
{
"status": "unaffected",
"version": "4.9.0_beta3-1012-0513-1778656146"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "strforexc (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was determined in GL.iNet MT3000 up to 4.4.5. This vulnerability affects unknown code of the file ovpnclient.sh of the component OpenVPN Client Import Workflow. This manipulation causes command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. Upgrading to version 4.9.0_beta3-1012-0513-1778656146 is able to resolve this issue. You should upgrade the affected component. The vendor confirms: \"This issue has been addressed by implementing malicious checks on OpenVPN configuration files to prevent command injection attacks carried through malicious configuration files.\""
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-77",
"description": "Command Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-06T09:15:12.019Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368966 | GL.iNet MT3000 OpenVPN Client Import Workflow ovpnclient.sh command injection",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/368966"
},
{
"name": "VDB-368966 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368966/cti"
},
{
"name": "CVE-2026-11406 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-11406"
},
{
"name": "Submit #820049 | GL.iNet MT3000 4.4.5 Command Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/820049"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/StrTzz123/iot_vul/tree/main/GL-iNet/MT3000/4.4.5/ovpn_client_import"
},
{
"tags": [
"patch"
],
"url": "https://fw.gl-inet.cn/firmware/mt3000/testing/mt3000-4.9.0_beta3-1012-0513-1778656146.tar"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-05T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-05T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-05T20:31:32.000Z",
"value": "VulDB entry last update"
}
],
"title": "GL.iNet MT3000 OpenVPN Client Import Workflow ovpnclient.sh command injection"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-11406",
"datePublished": "2026-06-06T09:15:12.019Z",
"dateReserved": "2026-06-05T18:26:22.054Z",
"dateUpdated": "2026-06-06T09:15:12.019Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11344 (GCVE-0-2026-11344)
Vulnerability from cvelistv5 – Published: 2026-06-05 17:15 – Updated: 2026-06-05 17:15 X_Freeware
VLAI
Title
code-projects Vehicle Management System New Driver Registration Form newdriver.php unrestricted upload
Summary
A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown function of the file newdriver.php of the component New Driver Registration Form. Performing a manipulation of the argument photo results in unrestricted upload. The attack may be initiated remotely. The exploit has been made public and could be used.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368884 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/368884/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-11344 | third-party-advisory |
| https://vuldb.com/submit/833153 | third-party-advisory |
| https://github.com/Xmyronn/Vehicle-Management-Sys… | exploit |
| https://code-projects.org/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| code-projects | Vehicle Management System |
Affected:
1.0
cpe:2.3:a:code-projects:vehicle_management_system:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:code-projects:vehicle_management_system:*:*:*:*:*:*:*:*"
],
"modules": [
"New Driver Registration Form"
],
"product": "Vehicle Management System",
"vendor": "code-projects",
"versions": [
{
"status": "affected",
"version": "1.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "imad alvi (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown function of the file newdriver.php of the component New Driver Registration Form. Performing a manipulation of the argument photo results in unrestricted upload. The attack may be initiated remotely. The exploit has been made public and could be used."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-434",
"description": "Unrestricted Upload",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "Improper Access Controls",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-05T17:15:10.282Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368884 | code-projects Vehicle Management System New Driver Registration Form newdriver.php unrestricted upload",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/368884"
},
{
"name": "VDB-368884 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368884/cti"
},
{
"name": "CVE-2026-11344 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-11344"
},
{
"name": "Submit #833153 | code-projects Vehicle Management System In PHP With Source Code 1.0` Incomplete Identification of Uploaded File Variables",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/833153"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/Xmyronn/Vehicle-Management-System-In-PHP---Unauthenticated-Remote-Code-Execution.git"
},
{
"tags": [
"product"
],
"url": "https://code-projects.org/"
}
],
"tags": [
"x_freeware"
],
"timeline": [
{
"lang": "en",
"time": "2026-06-05T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-05T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-05T10:27:21.000Z",
"value": "VulDB entry last update"
}
],
"title": "code-projects Vehicle Management System New Driver Registration Form newdriver.php unrestricted upload"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-11344",
"datePublished": "2026-06-05T17:15:10.282Z",
"dateReserved": "2026-06-05T08:22:17.289Z",
"dateUpdated": "2026-06-05T17:15:10.282Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11342 (GCVE-0-2026-11342)
Vulnerability from cvelistv5 – Published: 2026-06-05 17:00 – Updated: 2026-06-05 19:04 X_Freeware
VLAI
Title
code-projects Hotel and Tourism Reservation System details.php sql injection
Summary
A vulnerability has been found in code-projects Hotel and Tourism Reservation System 1.0. This affects an unknown function of the file /details.php. Such manipulation of the argument room leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Severity
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368883 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/368883/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-11342 | third-party-advisory |
| https://vuldb.com/submit/832902 | third-party-advisory |
| https://github.com/khanfyhhfgfe-cmyk/ht-sql/blob/… | exploit |
| https://code-projects.org/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| code-projects | Hotel and Tourism Reservation System |
Affected:
1.0
cpe:2.3:a:code-projects:hotel_and_tourism_reservation_system:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-11342",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-05T19:03:53.358669Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-05T19:04:01.746Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:code-projects:hotel_and_tourism_reservation_system:*:*:*:*:*:*:*:*"
],
"product": "Hotel and Tourism Reservation System",
"vendor": "code-projects",
"versions": [
{
"status": "affected",
"version": "1.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "12139xxl (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been found in code-projects Hotel and Tourism Reservation System 1.0. This affects an unknown function of the file /details.php. Such manipulation of the argument room leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-05T17:00:10.659Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368883 | code-projects Hotel and Tourism Reservation System details.php sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/368883"
},
{
"name": "VDB-368883 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368883/cti"
},
{
"name": "CVE-2026-11342 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-11342"
},
{
"name": "Submit #832902 | code-projects Hotel And Tourism Reservation System 1.0 SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/832902"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/khanfyhhfgfe-cmyk/ht-sql/blob/main/ht_sql.md"
},
{
"tags": [
"product"
],
"url": "https://code-projects.org/"
}
],
"tags": [
"x_freeware"
],
"timeline": [
{
"lang": "en",
"time": "2026-06-05T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-05T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-05T10:25:21.000Z",
"value": "VulDB entry last update"
}
],
"title": "code-projects Hotel and Tourism Reservation System details.php sql injection"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-11342",
"datePublished": "2026-06-05T17:00:10.659Z",
"dateReserved": "2026-06-05T08:20:18.328Z",
"dateUpdated": "2026-06-05T19:04:01.746Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11341 (GCVE-0-2026-11341)
Vulnerability from cvelistv5 – Published: 2026-06-05 16:45 – Updated: 2026-06-05 19:37
VLAI
Title
D-Link DWR-M920 formIMEISetup sub_412DA0 os command injection
Summary
A flaw has been found in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub_412DA0 of the file /boafrm/formIMEISetup. This manipulation of the argument IMEI_value causes os command injection. The attack can be initiated remotely. The exploit has been published and may be used.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368882 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/368882/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-11341 | third-party-advisory |
| https://vuldb.com/submit/832593 | third-party-advisory |
| https://github.com/7u7777/Dlink/blob/DWR-M920/for… | exploit |
| https://www.dlink.com/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| D-Link | DWR-M920 |
Affected:
1.1.0
Affected: 1.1.1 Affected: 1.1.2 Affected: 1.1.3 Affected: 1.1.4 Affected: 1.1.5 Affected: 1.1.6 Affected: 1.1.7 Affected: 1.1.8 Affected: 1.1.9 Affected: 1.1.10 Affected: 1.1.11 Affected: 1.1.12 Affected: 1.1.13 Affected: 1.1.14 Affected: 1.1.15 Affected: 1.1.16 Affected: 1.1.17 Affected: 1.1.18 Affected: 1.1.19 Affected: 1.1.20 Affected: 1.1.21 Affected: 1.1.22 Affected: 1.1.23 Affected: 1.1.24 Affected: 1.1.25 Affected: 1.1.26 Affected: 1.1.27 Affected: 1.1.28 Affected: 1.1.29 Affected: 1.1.30 Affected: 1.1.31 Affected: 1.1.32 Affected: 1.1.33 Affected: 1.1.34 Affected: 1.1.35 Affected: 1.1.36 Affected: 1.1.37 Affected: 1.1.38 Affected: 1.1.39 Affected: 1.1.40 Affected: 1.1.41 Affected: 1.1.42 Affected: 1.1.43 Affected: 1.1.44 Affected: 1.1.45 Affected: 1.1.46 Affected: 1.1.47 Affected: 1.1.48 Affected: 1.1.49 Affected: 1.1.50 cpe:2.3:h:d-link:dwr-m920:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-11341",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-05T19:37:05.583336Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-05T19:37:29.092Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:h:d-link:dwr-m920:*:*:*:*:*:*:*:*"
],
"product": "DWR-M920",
"vendor": "D-Link",
"versions": [
{
"status": "affected",
"version": "1.1.0"
},
{
"status": "affected",
"version": "1.1.1"
},
{
"status": "affected",
"version": "1.1.2"
},
{
"status": "affected",
"version": "1.1.3"
},
{
"status": "affected",
"version": "1.1.4"
},
{
"status": "affected",
"version": "1.1.5"
},
{
"status": "affected",
"version": "1.1.6"
},
{
"status": "affected",
"version": "1.1.7"
},
{
"status": "affected",
"version": "1.1.8"
},
{
"status": "affected",
"version": "1.1.9"
},
{
"status": "affected",
"version": "1.1.10"
},
{
"status": "affected",
"version": "1.1.11"
},
{
"status": "affected",
"version": "1.1.12"
},
{
"status": "affected",
"version": "1.1.13"
},
{
"status": "affected",
"version": "1.1.14"
},
{
"status": "affected",
"version": "1.1.15"
},
{
"status": "affected",
"version": "1.1.16"
},
{
"status": "affected",
"version": "1.1.17"
},
{
"status": "affected",
"version": "1.1.18"
},
{
"status": "affected",
"version": "1.1.19"
},
{
"status": "affected",
"version": "1.1.20"
},
{
"status": "affected",
"version": "1.1.21"
},
{
"status": "affected",
"version": "1.1.22"
},
{
"status": "affected",
"version": "1.1.23"
},
{
"status": "affected",
"version": "1.1.24"
},
{
"status": "affected",
"version": "1.1.25"
},
{
"status": "affected",
"version": "1.1.26"
},
{
"status": "affected",
"version": "1.1.27"
},
{
"status": "affected",
"version": "1.1.28"
},
{
"status": "affected",
"version": "1.1.29"
},
{
"status": "affected",
"version": "1.1.30"
},
{
"status": "affected",
"version": "1.1.31"
},
{
"status": "affected",
"version": "1.1.32"
},
{
"status": "affected",
"version": "1.1.33"
},
{
"status": "affected",
"version": "1.1.34"
},
{
"status": "affected",
"version": "1.1.35"
},
{
"status": "affected",
"version": "1.1.36"
},
{
"status": "affected",
"version": "1.1.37"
},
{
"status": "affected",
"version": "1.1.38"
},
{
"status": "affected",
"version": "1.1.39"
},
{
"status": "affected",
"version": "1.1.40"
},
{
"status": "affected",
"version": "1.1.41"
},
{
"status": "affected",
"version": "1.1.42"
},
{
"status": "affected",
"version": "1.1.43"
},
{
"status": "affected",
"version": "1.1.44"
},
{
"status": "affected",
"version": "1.1.45"
},
{
"status": "affected",
"version": "1.1.46"
},
{
"status": "affected",
"version": "1.1.47"
},
{
"status": "affected",
"version": "1.1.48"
},
{
"status": "affected",
"version": "1.1.49"
},
{
"status": "affected",
"version": "1.1.50"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "kkff33 (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A flaw has been found in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub_412DA0 of the file /boafrm/formIMEISetup. This manipulation of the argument IMEI_value causes os command injection. The attack can be initiated remotely. The exploit has been published and may be used."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "OS Command Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-77",
"description": "Command Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-05T16:45:09.150Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368882 | D-Link DWR-M920 formIMEISetup sub_412DA0 os command injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/368882"
},
{
"name": "VDB-368882 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368882/cti"
},
{
"name": "CVE-2026-11341 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-11341"
},
{
"name": "Submit #832593 | D-Link DWR-M920 1.1.50 Command Injection and Stack Buffer Overflow",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/832593"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/7u7777/Dlink/blob/DWR-M920/formIMEISetup.md"
},
{
"tags": [
"product"
],
"url": "https://www.dlink.com/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-05T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-05T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-05T10:24:16.000Z",
"value": "VulDB entry last update"
}
],
"title": "D-Link DWR-M920 formIMEISetup sub_412DA0 os command injection"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-11341",
"datePublished": "2026-06-05T16:45:09.150Z",
"dateReserved": "2026-06-05T08:19:13.223Z",
"dateUpdated": "2026-06-05T19:37:29.092Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11339 (GCVE-0-2026-11339)
Vulnerability from cvelistv5 – Published: 2026-06-05 16:30 – Updated: 2026-06-05 16:30
VLAI
Title
D-Link DWR-M920 formUSSDSetup sub_41CF20 command injection
Summary
A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. The affected element is the function sub_41CF20 of the file /boafrm/formUSSDSetup. The manipulation of the argument ussdValue results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368881 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/368881/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-11339 | third-party-advisory |
| https://vuldb.com/submit/832579 | third-party-advisory |
| https://github.com/7u7777/Dlink/blob/DWR-M920/for… | exploit |
| https://www.dlink.com/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| D-Link | DWR-M920 |
Affected:
1.1.0
Affected: 1.1.1 Affected: 1.1.2 Affected: 1.1.3 Affected: 1.1.4 Affected: 1.1.5 Affected: 1.1.6 Affected: 1.1.7 Affected: 1.1.8 Affected: 1.1.9 Affected: 1.1.10 Affected: 1.1.11 Affected: 1.1.12 Affected: 1.1.13 Affected: 1.1.14 Affected: 1.1.15 Affected: 1.1.16 Affected: 1.1.17 Affected: 1.1.18 Affected: 1.1.19 Affected: 1.1.20 Affected: 1.1.21 Affected: 1.1.22 Affected: 1.1.23 Affected: 1.1.24 Affected: 1.1.25 Affected: 1.1.26 Affected: 1.1.27 Affected: 1.1.28 Affected: 1.1.29 Affected: 1.1.30 Affected: 1.1.31 Affected: 1.1.32 Affected: 1.1.33 Affected: 1.1.34 Affected: 1.1.35 Affected: 1.1.36 Affected: 1.1.37 Affected: 1.1.38 Affected: 1.1.39 Affected: 1.1.40 Affected: 1.1.41 Affected: 1.1.42 Affected: 1.1.43 Affected: 1.1.44 Affected: 1.1.45 Affected: 1.1.46 Affected: 1.1.47 Affected: 1.1.48 Affected: 1.1.49 Affected: 1.1.50 cpe:2.3:h:d-link:dwr-m920:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:h:d-link:dwr-m920:*:*:*:*:*:*:*:*"
],
"product": "DWR-M920",
"vendor": "D-Link",
"versions": [
{
"status": "affected",
"version": "1.1.0"
},
{
"status": "affected",
"version": "1.1.1"
},
{
"status": "affected",
"version": "1.1.2"
},
{
"status": "affected",
"version": "1.1.3"
},
{
"status": "affected",
"version": "1.1.4"
},
{
"status": "affected",
"version": "1.1.5"
},
{
"status": "affected",
"version": "1.1.6"
},
{
"status": "affected",
"version": "1.1.7"
},
{
"status": "affected",
"version": "1.1.8"
},
{
"status": "affected",
"version": "1.1.9"
},
{
"status": "affected",
"version": "1.1.10"
},
{
"status": "affected",
"version": "1.1.11"
},
{
"status": "affected",
"version": "1.1.12"
},
{
"status": "affected",
"version": "1.1.13"
},
{
"status": "affected",
"version": "1.1.14"
},
{
"status": "affected",
"version": "1.1.15"
},
{
"status": "affected",
"version": "1.1.16"
},
{
"status": "affected",
"version": "1.1.17"
},
{
"status": "affected",
"version": "1.1.18"
},
{
"status": "affected",
"version": "1.1.19"
},
{
"status": "affected",
"version": "1.1.20"
},
{
"status": "affected",
"version": "1.1.21"
},
{
"status": "affected",
"version": "1.1.22"
},
{
"status": "affected",
"version": "1.1.23"
},
{
"status": "affected",
"version": "1.1.24"
},
{
"status": "affected",
"version": "1.1.25"
},
{
"status": "affected",
"version": "1.1.26"
},
{
"status": "affected",
"version": "1.1.27"
},
{
"status": "affected",
"version": "1.1.28"
},
{
"status": "affected",
"version": "1.1.29"
},
{
"status": "affected",
"version": "1.1.30"
},
{
"status": "affected",
"version": "1.1.31"
},
{
"status": "affected",
"version": "1.1.32"
},
{
"status": "affected",
"version": "1.1.33"
},
{
"status": "affected",
"version": "1.1.34"
},
{
"status": "affected",
"version": "1.1.35"
},
{
"status": "affected",
"version": "1.1.36"
},
{
"status": "affected",
"version": "1.1.37"
},
{
"status": "affected",
"version": "1.1.38"
},
{
"status": "affected",
"version": "1.1.39"
},
{
"status": "affected",
"version": "1.1.40"
},
{
"status": "affected",
"version": "1.1.41"
},
{
"status": "affected",
"version": "1.1.42"
},
{
"status": "affected",
"version": "1.1.43"
},
{
"status": "affected",
"version": "1.1.44"
},
{
"status": "affected",
"version": "1.1.45"
},
{
"status": "affected",
"version": "1.1.46"
},
{
"status": "affected",
"version": "1.1.47"
},
{
"status": "affected",
"version": "1.1.48"
},
{
"status": "affected",
"version": "1.1.49"
},
{
"status": "affected",
"version": "1.1.50"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "kkff33 (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. The affected element is the function sub_41CF20 of the file /boafrm/formUSSDSetup. The manipulation of the argument ussdValue results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-77",
"description": "Command Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-05T16:30:11.653Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368881 | D-Link DWR-M920 formUSSDSetup sub_41CF20 command injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/368881"
},
{
"name": "VDB-368881 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368881/cti"
},
{
"name": "CVE-2026-11339 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-11339"
},
{
"name": "Submit #832579 | D-Link DWR-M920 1.1.50 Code Injection and Buffer Overflow",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/832579"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/7u7777/Dlink/blob/DWR-M920/formUSSDSetup.md"
},
{
"tags": [
"product"
],
"url": "https://www.dlink.com/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-05T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-05T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-05T10:23:13.000Z",
"value": "VulDB entry last update"
}
],
"title": "D-Link DWR-M920 formUSSDSetup sub_41CF20 command injection"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-11339",
"datePublished": "2026-06-05T16:30:11.653Z",
"dateReserved": "2026-06-05T08:18:10.205Z",
"dateUpdated": "2026-06-05T16:30:11.653Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11338 (GCVE-0-2026-11338)
Vulnerability from cvelistv5 – Published: 2026-06-05 16:15 – Updated: 2026-06-05 16:15 X_Freeware
VLAI
Title
SourceCodester Ship Ferry Ticket Reservation System manage_user cross site scripting
Summary
A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System 1.0. Impacted is an unknown function of the file /admin/?page=user/manage_user. The manipulation of the argument Username leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368880 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/368880/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-11338 | third-party-advisory |
| https://vuldb.com/submit/832571 | third-party-advisory |
| https://medium.com/@hemantrajbhati5555/stored-cro… | broken-linkexploit |
| https://www.sourcecodester.com/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| SourceCodester | Ship Ferry Ticket Reservation System |
Affected:
1.0
cpe:2.3:a:sourcecodester:ship_ferry_ticket_reservation_system:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:sourcecodester:ship_ferry_ticket_reservation_system:*:*:*:*:*:*:*:*"
],
"product": "Ship Ferry Ticket Reservation System",
"vendor": "SourceCodester",
"versions": [
{
"status": "affected",
"version": "1.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Hemant Raj Bhati (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System 1.0. Impacted is an unknown function of the file /admin/?page=user/manage_user. The manipulation of the argument Username leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 2.4,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 2.4,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 3.3,
"vectorString": "AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "Cross Site Scripting",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "Code Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-05T16:15:09.617Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368880 | SourceCodester Ship Ferry Ticket Reservation System manage_user cross site scripting",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/368880"
},
{
"name": "VDB-368880 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368880/cti"
},
{
"name": "CVE-2026-11338 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-11338"
},
{
"name": "Submit #832571 | SourceCodester Ship/Ferry Ticket Reservation System 1.0 Cross Site Scripting",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/832571"
},
{
"tags": [
"broken-link",
"exploit"
],
"url": "https://medium.com/@hemantrajbhati5555/stored-cross-site-scripting-stored-xss-in-username-field-leads-to-arbitrary-javascript-execution-cd377841da30"
},
{
"tags": [
"product"
],
"url": "https://www.sourcecodester.com/"
}
],
"tags": [
"x_freeware"
],
"timeline": [
{
"lang": "en",
"time": "2026-06-05T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-05T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-05T10:22:10.000Z",
"value": "VulDB entry last update"
}
],
"title": "SourceCodester Ship Ferry Ticket Reservation System manage_user cross site scripting"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-11338",
"datePublished": "2026-06-05T16:15:09.617Z",
"dateReserved": "2026-06-05T08:17:03.896Z",
"dateUpdated": "2026-06-05T16:15:09.617Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11337 (GCVE-0-2026-11337)
Vulnerability from cvelistv5 – Published: 2026-06-05 15:45 – Updated: 2026-06-05 15:45
VLAI
Title
tittuvarghese CollegeManagementSystem fetch.php cross site scripting
Summary
A vulnerability was found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. Affected by this vulnerability is an unknown functionality of the file /dashboard_page/forms/fetch.php. The manipulation of the argument department_name results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368875 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/368875/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-11337 | third-party-advisory |
| https://vuldb.com/submit/832583 | third-party-advisory |
| https://github.com/tittuvarghese/CollegeManagemen… | exploitissue-tracking |
| https://github.com/tittuvarghese/CollegeManagemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| tittuvarghese | CollegeManagementSystem |
Affected:
3e476335cfbfb9a049e09f474c7ec885f69a9df3
Affected: a38852979f7e27ae67b610dce5979500ef8ebe01 cpe:2.3:a:tittuvarghese:collegemanagementsystem:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:tittuvarghese:collegemanagementsystem:*:*:*:*:*:*:*:*"
],
"product": "CollegeManagementSystem",
"vendor": "tittuvarghese",
"versions": [
{
"status": "affected",
"version": "3e476335cfbfb9a049e09f474c7ec885f69a9df3"
},
{
"status": "affected",
"version": "a38852979f7e27ae67b610dce5979500ef8ebe01"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Lucky ya-ya (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. Affected by this vulnerability is an unknown functionality of the file /dashboard_page/forms/fetch.php. The manipulation of the argument department_name results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 5,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "Cross Site Scripting",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "Code Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-05T15:45:10.844Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368875 | tittuvarghese CollegeManagementSystem fetch.php cross site scripting",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/368875"
},
{
"name": "VDB-368875 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368875/cti"
},
{
"name": "CVE-2026-11337 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-11337"
},
{
"name": "Submit #832583 | tittuvarghese CollegeManagementSystem 1.0 Reflected Cross\u2011Site Scripting",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/832583"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/tittuvarghese/CollegeManagementSystem/issues/6"
},
{
"tags": [
"product"
],
"url": "https://github.com/tittuvarghese/CollegeManagementSystem/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-05T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-05T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-05T10:15:28.000Z",
"value": "VulDB entry last update"
}
],
"title": "tittuvarghese CollegeManagementSystem fetch.php cross site scripting"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-11337",
"datePublished": "2026-06-05T15:45:10.844Z",
"dateReserved": "2026-06-05T08:10:10.570Z",
"dateUpdated": "2026-06-05T15:45:10.844Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11336 (GCVE-0-2026-11336)
Vulnerability from cvelistv5 – Published: 2026-06-05 15:00 – Updated: 2026-06-05 15:00
VLAI
Title
tittuvarghese CollegeManagementSystem Admin admin_page.php improper authorization
Summary
A vulnerability has been found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. Affected is an unknown function of the file dashboard_page/admin_page.php of the component Admin Interface. The manipulation of the argument UserAuthData leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368874 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/368874/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-11336 | third-party-advisory |
| https://vuldb.com/submit/832582 | third-party-advisory |
| https://github.com/tittuvarghese/CollegeManagemen… | exploitissue-tracking |
| https://github.com/tittuvarghese/CollegeManagemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| tittuvarghese | CollegeManagementSystem |
Affected:
3e476335cfbfb9a049e09f474c7ec885f69a9df3
Affected: a38852979f7e27ae67b610dce5979500ef8ebe01 cpe:2.3:a:tittuvarghese:collegemanagementsystem:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:tittuvarghese:collegemanagementsystem:*:*:*:*:*:*:*:*"
],
"modules": [
"Admin Interface"
],
"product": "CollegeManagementSystem",
"vendor": "tittuvarghese",
"versions": [
{
"status": "affected",
"version": "3e476335cfbfb9a049e09f474c7ec885f69a9df3"
},
{
"status": "affected",
"version": "a38852979f7e27ae67b610dce5979500ef8ebe01"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "wea5e1 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. Affected is an unknown function of the file dashboard_page/admin_page.php of the component Admin Interface. The manipulation of the argument UserAuthData leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-285",
"description": "Improper Authorization",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-266",
"description": "Incorrect Privilege Assignment",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-05T15:00:16.287Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368874 | tittuvarghese CollegeManagementSystem Admin admin_page.php improper authorization",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/368874"
},
{
"name": "VDB-368874 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368874/cti"
},
{
"name": "CVE-2026-11336 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-11336"
},
{
"name": "Submit #832582 | tittuvarghese CollegeManagementSystem 1.0 Privilege Escalation",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/832582"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/tittuvarghese/CollegeManagementSystem/issues/5"
},
{
"tags": [
"product"
],
"url": "https://github.com/tittuvarghese/CollegeManagementSystem/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-05T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-05T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-05T10:15:25.000Z",
"value": "VulDB entry last update"
}
],
"title": "tittuvarghese CollegeManagementSystem Admin admin_page.php improper authorization"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-11336",
"datePublished": "2026-06-05T15:00:16.287Z",
"dateReserved": "2026-06-05T08:10:07.777Z",
"dateUpdated": "2026-06-05T15:00:16.287Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11335 (GCVE-0-2026-11335)
Vulnerability from cvelistv5 – Published: 2026-06-05 14:30 – Updated: 2026-06-05 15:28
VLAI
Title
tittuvarghese CollegeManagementSystem login-form.php session_start session fixiation
Summary
A flaw has been found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. This impacts the function session_start of the file /login-form.php. Executing a manipulation of the argument UserAuthData can lead to session fixiation. The attack can be launched remotely. The exploit has been published and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-384 - Session Fixiation
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368873 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/368873/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-11335 | third-party-advisory |
| https://vuldb.com/submit/832564 | third-party-advisory |
| https://github.com/tittuvarghese/CollegeManagemen… | exploitissue-tracking |
| https://github.com/tittuvarghese/CollegeManagemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| tittuvarghese | CollegeManagementSystem |
Affected:
3e476335cfbfb9a049e09f474c7ec885f69a9df3
Affected: a38852979f7e27ae67b610dce5979500ef8ebe01 cpe:2.3:a:tittuvarghese:collegemanagementsystem:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-11335",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-05T15:28:00.911291Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-05T15:28:07.914Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:tittuvarghese:collegemanagementsystem:*:*:*:*:*:*:*:*"
],
"product": "CollegeManagementSystem",
"vendor": "tittuvarghese",
"versions": [
{
"status": "affected",
"version": "3e476335cfbfb9a049e09f474c7ec885f69a9df3"
},
{
"status": "affected",
"version": "a38852979f7e27ae67b610dce5979500ef8ebe01"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "songlan (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A flaw has been found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. This impacts the function session_start of the file /login-form.php. Executing a manipulation of the argument UserAuthData can lead to session fixiation. The attack can be launched remotely. The exploit has been published and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-384",
"description": "Session Fixiation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-05T14:30:11.395Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368873 | tittuvarghese CollegeManagementSystem login-form.php session_start session fixiation",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/368873"
},
{
"name": "VDB-368873 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368873/cti"
},
{
"name": "CVE-2026-11335 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-11335"
},
{
"name": "Submit #832564 | tittuvarghese CollegeManagementSystem 1.0 Session Fixation Leading to Account Takeover",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/832564"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/tittuvarghese/CollegeManagementSystem/issues/4"
},
{
"tags": [
"product"
],
"url": "https://github.com/tittuvarghese/CollegeManagementSystem/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-05T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-05T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-05T10:15:22.000Z",
"value": "VulDB entry last update"
}
],
"title": "tittuvarghese CollegeManagementSystem login-form.php session_start session fixiation"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-11335",
"datePublished": "2026-06-05T14:30:11.395Z",
"dateReserved": "2026-06-05T08:10:04.886Z",
"dateUpdated": "2026-06-05T15:28:07.914Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11334 (GCVE-0-2026-11334)
Vulnerability from cvelistv5 – Published: 2026-06-05 14:00 – Updated: 2026-06-05 19:36
VLAI
Title
tittuvarghese CollegeManagementSystem fetch.php sql injection
Summary
A vulnerability was detected in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. This affects an unknown function of the file dashboard_page/forms/fetch.php. Performing a manipulation of the argument department_code results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368872 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/368872/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-11334 | third-party-advisory |
| https://vuldb.com/submit/832535 | third-party-advisory |
| https://github.com/tittuvarghese/CollegeManagemen… | exploitissue-tracking |
| https://github.com/tittuvarghese/CollegeManagemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| tittuvarghese | CollegeManagementSystem |
Affected:
3e476335cfbfb9a049e09f474c7ec885f69a9df3
Affected: a38852979f7e27ae67b610dce5979500ef8ebe01 cpe:2.3:a:tittuvarghese:collegemanagementsystem:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-11334",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-05T19:36:01.177102Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-05T19:36:16.823Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:tittuvarghese:collegemanagementsystem:*:*:*:*:*:*:*:*"
],
"product": "CollegeManagementSystem",
"vendor": "tittuvarghese",
"versions": [
{
"status": "affected",
"version": "3e476335cfbfb9a049e09f474c7ec885f69a9df3"
},
{
"status": "affected",
"version": "a38852979f7e27ae67b610dce5979500ef8ebe01"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Nicole_mo (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. This affects an unknown function of the file dashboard_page/forms/fetch.php. Performing a manipulation of the argument department_code results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-05T14:00:12.114Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368872 | tittuvarghese CollegeManagementSystem fetch.php sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/368872"
},
{
"name": "VDB-368872 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368872/cti"
},
{
"name": "CVE-2026-11334 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-11334"
},
{
"name": "Submit #832535 | tittuvarghese CollegeManagementSystem 1.0 SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/832535"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/tittuvarghese/CollegeManagementSystem/issues/3"
},
{
"tags": [
"product"
],
"url": "https://github.com/tittuvarghese/CollegeManagementSystem/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-05T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-05T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-05T10:15:19.000Z",
"value": "VulDB entry last update"
}
],
"title": "tittuvarghese CollegeManagementSystem fetch.php sql injection"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-11334",
"datePublished": "2026-06-05T14:00:12.114Z",
"dateReserved": "2026-06-05T08:10:02.111Z",
"dateUpdated": "2026-06-05T19:36:16.823Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11333 (GCVE-0-2026-11333)
Vulnerability from cvelistv5 – Published: 2026-06-05 13:45 – Updated: 2026-06-05 13:45
VLAI
Title
tittuvarghese CollegeManagementSystem Student Data Upload Endpoint upload_student_data.php unrestricted upload
Summary
A security vulnerability has been detected in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. The impacted element is an unknown function of the file dashboard_page/forms/upload_student_data.php of the component Student Data Upload Endpoint. Such manipulation of the argument Student-Data-CSV leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368871 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/368871/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-11333 | third-party-advisory |
| https://vuldb.com/submit/832530 | third-party-advisory |
| https://github.com/tittuvarghese/CollegeManagemen… | exploitissue-tracking |
| https://github.com/tittuvarghese/CollegeManagemen… | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| tittuvarghese | CollegeManagementSystem |
Affected:
3e476335cfbfb9a049e09f474c7ec885f69a9df3
Affected: a38852979f7e27ae67b610dce5979500ef8ebe01 cpe:2.3:a:tittuvarghese:collegemanagementsystem:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:tittuvarghese:collegemanagementsystem:*:*:*:*:*:*:*:*"
],
"modules": [
"Student Data Upload Endpoint"
],
"product": "CollegeManagementSystem",
"vendor": "tittuvarghese",
"versions": [
{
"status": "affected",
"version": "3e476335cfbfb9a049e09f474c7ec885f69a9df3"
},
{
"status": "affected",
"version": "a38852979f7e27ae67b610dce5979500ef8ebe01"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Sw0rd (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. The impacted element is an unknown function of the file dashboard_page/forms/upload_student_data.php of the component Student Data Upload Endpoint. Such manipulation of the argument Student-Data-CSV leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-434",
"description": "Unrestricted Upload",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "Improper Access Controls",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-05T13:45:07.923Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368871 | tittuvarghese CollegeManagementSystem Student Data Upload Endpoint upload_student_data.php unrestricted upload",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/368871"
},
{
"name": "VDB-368871 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368871/cti"
},
{
"name": "CVE-2026-11333 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-11333"
},
{
"name": "Submit #832530 | tittuvarghese CollegeManagementSystem 1.0 Unrestricted File Upload Leading",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/832530"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/tittuvarghese/CollegeManagementSystem/issues/2"
},
{
"tags": [
"product"
],
"url": "https://github.com/tittuvarghese/CollegeManagementSystem/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-05T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-05T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-05T10:15:16.000Z",
"value": "VulDB entry last update"
}
],
"title": "tittuvarghese CollegeManagementSystem Student Data Upload Endpoint upload_student_data.php unrestricted upload"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-11333",
"datePublished": "2026-06-05T13:45:07.923Z",
"dateReserved": "2026-06-05T08:09:58.207Z",
"dateUpdated": "2026-06-05T13:45:07.923Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11330 (GCVE-0-2026-11330)
Vulnerability from cvelistv5 – Published: 2026-06-05 12:45 – Updated: 2026-06-05 12:45 X_Open Source
VLAI
Title
thedotmack claude-mem Observation Content Hash store.ts computeObservationContentHash weak hash
Summary
A weakness has been identified in thedotmack claude-mem up to 11.0.1. The affected element is the function computeObservationContentHash of the file src/services/sqlite/observations/store.ts of the component Observation Content Hash Handler. This manipulation causes use of weak hash. The attack can only be executed locally. The attack's complexity is rated as high. The exploitability is described as difficult. Upgrading to version 12.0.0 is sufficient to fix this issue. Patch name: f32fda8b35e9fe9329f87da65c31149362a03f97. It is suggested to upgrade the affected component.
Severity
Assigner
References
8 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368870 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/368870/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-11330 | third-party-advisory |
| https://vuldb.com/submit/832401 | third-party-advisory |
| https://github.com/thedotmack/claude-mem/pull/1494 | issue-trackingpatch |
| https://github.com/thedotmack/claude-mem/commit/f… | patch |
| https://github.com/thedotmack/claude-mem/releases… | patch |
| https://github.com/thedotmack/claude-mem/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| thedotmack | claude-mem |
Affected:
11.0.0
Affected: 11.0.1 Unaffected: 12.0.0 cpe:2.3:a:thedotmack:claude-mem:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:thedotmack:claude-mem:*:*:*:*:*:*:*:*"
],
"modules": [
"Observation Content Hash Handler"
],
"product": "claude-mem",
"vendor": "thedotmack",
"versions": [
{
"status": "affected",
"version": "11.0.0"
},
{
"status": "affected",
"version": "11.0.1"
},
{
"status": "unaffected",
"version": "12.0.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Dem00 (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in thedotmack claude-mem up to 11.0.1. The affected element is the function computeObservationContentHash of the file src/services/sqlite/observations/store.ts of the component Observation Content Hash Handler. This manipulation causes use of weak hash. The attack can only be executed locally. The attack\u0027s complexity is rated as high. The exploitability is described as difficult. Upgrading to version 12.0.0 is sufficient to fix this issue. Patch name: f32fda8b35e9fe9329f87da65c31149362a03f97. It is suggested to upgrade the affected component."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 2,
"baseSeverity": "LOW",
"vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 3.6,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L/E:X/RL:O/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 3.6,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L/E:X/RL:O/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 2.4,
"vectorString": "AV:L/AC:H/Au:S/C:N/I:P/A:P/E:ND/RL:OF/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-328",
"description": "Use of Weak Hash",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-327",
"description": "Risky Cryptographic Algorithm",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-05T12:45:12.204Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368870 | thedotmack claude-mem Observation Content Hash store.ts computeObservationContentHash weak hash",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/368870"
},
{
"name": "VDB-368870 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368870/cti"
},
{
"name": "CVE-2026-11330 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-11330"
},
{
"name": "Submit #832401 | thedotmack claude-mem v10.4.0 - Improper content hash construction - Field-boundary ambiguity",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/832401"
},
{
"tags": [
"issue-tracking",
"patch"
],
"url": "https://github.com/thedotmack/claude-mem/pull/1494"
},
{
"tags": [
"patch"
],
"url": "https://github.com/thedotmack/claude-mem/commit/f32fda8b35e9fe9329f87da65c31149362a03f97"
},
{
"tags": [
"patch"
],
"url": "https://github.com/thedotmack/claude-mem/releases/tag/v12.0.0"
},
{
"tags": [
"product"
],
"url": "https://github.com/thedotmack/claude-mem/"
}
],
"tags": [
"x_open-source"
],
"timeline": [
{
"lang": "en",
"time": "2026-06-05T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-05T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-05T09:01:15.000Z",
"value": "VulDB entry last update"
}
],
"title": "thedotmack claude-mem Observation Content Hash store.ts computeObservationContentHash weak hash"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-11330",
"datePublished": "2026-06-05T12:45:12.204Z",
"dateReserved": "2026-06-05T06:56:10.993Z",
"dateUpdated": "2026-06-05T12:45:12.204Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11329 (GCVE-0-2026-11329)
Vulnerability from cvelistv5 – Published: 2026-06-05 12:15 – Updated: 2026-06-05 12:15 X_Open Source
VLAI
Title
onnx onnx-mlir Placeholder Node Cache backend.py generate_hash_key weak hash
Summary
A vulnerability has been found in onnx onnx-mlir up to 0.5.0.0. Affected by this issue is the function generate_hash_key of the file src/Runtime/python/torch_onnxmlir/src/torch_onnxmlir/backend.py of the component Placeholder Node Cache Handler. Such manipulation leads to use of weak hash. An attack has to be approached locally. A high complexity level is associated with this attack. The exploitation is known to be difficult. The name of the patch is 72c5187ff6d13c2c2b3d3789b8f5faf99f08a5b4. Applying a patch is advised to resolve this issue.
Severity
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368865 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/368865/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-11329 | third-party-advisory |
| https://vuldb.com/submit/832358 | third-party-advisory |
| https://github.com/onnx/onnx-mlir/pull/3427 | issue-trackingpatch |
| https://github.com/onnx/onnx-mlir/commit/72c5187f… | patch |
| https://github.com/onnx/onnx-mlir/ | product |
Impacted products
Credits
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:onnx:onnx-mlir:*:*:*:*:*:*:*:*"
],
"modules": [
"Placeholder Node Cache Handler"
],
"product": "onnx-mlir",
"vendor": "onnx",
"versions": [
{
"status": "affected",
"version": "0.5.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Dem00 (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been found in onnx onnx-mlir up to 0.5.0.0. Affected by this issue is the function generate_hash_key of the file src/Runtime/python/torch_onnxmlir/src/torch_onnxmlir/backend.py of the component Placeholder Node Cache Handler. Such manipulation leads to use of weak hash. An attack has to be approached locally. A high complexity level is associated with this attack. The exploitation is known to be difficult. The name of the patch is 72c5187ff6d13c2c2b3d3789b8f5faf99f08a5b4. Applying a patch is advised to resolve this issue."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 2,
"baseSeverity": "LOW",
"vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 3.6,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L/E:X/RL:O/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 3.6,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L/E:X/RL:O/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 2.4,
"vectorString": "AV:L/AC:H/Au:S/C:N/I:P/A:P/E:ND/RL:OF/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-328",
"description": "Use of Weak Hash",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-327",
"description": "Risky Cryptographic Algorithm",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-05T12:15:11.835Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368865 | onnx onnx-mlir Placeholder Node Cache backend.py generate_hash_key weak hash",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/368865"
},
{
"name": "VDB-368865 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368865/cti"
},
{
"name": "CVE-2026-11329 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-11329"
},
{
"name": "Submit #832358 | onnx onnx-mlir v0.5.0.0 cache key collision",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/832358"
},
{
"tags": [
"issue-tracking",
"patch"
],
"url": "https://github.com/onnx/onnx-mlir/pull/3427"
},
{
"tags": [
"patch"
],
"url": "https://github.com/onnx/onnx-mlir/commit/72c5187ff6d13c2c2b3d3789b8f5faf99f08a5b4"
},
{
"tags": [
"product"
],
"url": "https://github.com/onnx/onnx-mlir/"
}
],
"tags": [
"x_open-source"
],
"timeline": [
{
"lang": "en",
"time": "2026-06-05T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-05T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-05T08:48:29.000Z",
"value": "VulDB entry last update"
}
],
"title": "onnx onnx-mlir Placeholder Node Cache backend.py generate_hash_key weak hash"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-11329",
"datePublished": "2026-06-05T12:15:11.835Z",
"dateReserved": "2026-06-05T06:43:25.150Z",
"dateUpdated": "2026-06-05T12:15:11.835Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11312 (GCVE-0-2026-11312)
Vulnerability from cvelistv5 – Published: 2026-06-05 00:30 – Updated: 2026-06-05 13:12
VLAI
Title
bytedance InfiniStore KV Map infinistore.h purge_kv_map algorithmic complexity
Summary
A vulnerability was found in bytedance InfiniStore up to 0.2.33. The impacted element is the function purge_kv_map in the library /src/infinistore.h of the component KV Map Handler. Performing a manipulation results in inefficient algorithmic complexity. The attack requires a local approach. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368398 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/368398/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-11312 | third-party-advisory |
| https://vuldb.com/submit/832348 | third-party-advisory |
| https://github.com/bytedance/InfiniStore/issues/200 | exploitissue-tracking |
| https://github.com/bytedance/InfiniStore/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| bytedance | InfiniStore |
Affected:
0.2.0
Affected: 0.2.1 Affected: 0.2.2 Affected: 0.2.3 Affected: 0.2.4 Affected: 0.2.5 Affected: 0.2.6 Affected: 0.2.7 Affected: 0.2.8 Affected: 0.2.9 Affected: 0.2.10 Affected: 0.2.11 Affected: 0.2.12 Affected: 0.2.13 Affected: 0.2.14 Affected: 0.2.15 Affected: 0.2.16 Affected: 0.2.17 Affected: 0.2.18 Affected: 0.2.19 Affected: 0.2.20 Affected: 0.2.21 Affected: 0.2.22 Affected: 0.2.23 Affected: 0.2.24 Affected: 0.2.25 Affected: 0.2.26 Affected: 0.2.27 Affected: 0.2.28 Affected: 0.2.29 Affected: 0.2.30 Affected: 0.2.31 Affected: 0.2.32 Affected: 0.2.33 cpe:2.3:a:bytedance:infinistore:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-11312",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-05T13:12:38.127231Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-05T13:12:50.570Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:bytedance:infinistore:*:*:*:*:*:*:*:*"
],
"modules": [
"KV Map Handler"
],
"product": "InfiniStore",
"vendor": "bytedance",
"versions": [
{
"status": "affected",
"version": "0.2.0"
},
{
"status": "affected",
"version": "0.2.1"
},
{
"status": "affected",
"version": "0.2.2"
},
{
"status": "affected",
"version": "0.2.3"
},
{
"status": "affected",
"version": "0.2.4"
},
{
"status": "affected",
"version": "0.2.5"
},
{
"status": "affected",
"version": "0.2.6"
},
{
"status": "affected",
"version": "0.2.7"
},
{
"status": "affected",
"version": "0.2.8"
},
{
"status": "affected",
"version": "0.2.9"
},
{
"status": "affected",
"version": "0.2.10"
},
{
"status": "affected",
"version": "0.2.11"
},
{
"status": "affected",
"version": "0.2.12"
},
{
"status": "affected",
"version": "0.2.13"
},
{
"status": "affected",
"version": "0.2.14"
},
{
"status": "affected",
"version": "0.2.15"
},
{
"status": "affected",
"version": "0.2.16"
},
{
"status": "affected",
"version": "0.2.17"
},
{
"status": "affected",
"version": "0.2.18"
},
{
"status": "affected",
"version": "0.2.19"
},
{
"status": "affected",
"version": "0.2.20"
},
{
"status": "affected",
"version": "0.2.21"
},
{
"status": "affected",
"version": "0.2.22"
},
{
"status": "affected",
"version": "0.2.23"
},
{
"status": "affected",
"version": "0.2.24"
},
{
"status": "affected",
"version": "0.2.25"
},
{
"status": "affected",
"version": "0.2.26"
},
{
"status": "affected",
"version": "0.2.27"
},
{
"status": "affected",
"version": "0.2.28"
},
{
"status": "affected",
"version": "0.2.29"
},
{
"status": "affected",
"version": "0.2.30"
},
{
"status": "affected",
"version": "0.2.31"
},
{
"status": "affected",
"version": "0.2.32"
},
{
"status": "affected",
"version": "0.2.33"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Dem00 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in bytedance InfiniStore up to 0.2.33. The impacted element is the function purge_kv_map in the library /src/infinistore.h of the component KV Map Handler. Performing a manipulation results in inefficient algorithmic complexity. The attack requires a local approach. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 1.7,
"vectorString": "AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-407",
"description": "Inefficient Algorithmic Complexity",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-404",
"description": "Denial of Service",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-05T00:30:14.091Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368398 | bytedance InfiniStore KV Map infinistore.h purge_kv_map algorithmic complexity",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/368398"
},
{
"name": "VDB-368398 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368398/cti"
},
{
"name": "CVE-2026-11312 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-11312"
},
{
"name": "Submit #832348 | bytedance InfiniStore 0.2.33 Denial of Service",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/832348"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/bytedance/InfiniStore/issues/200"
},
{
"tags": [
"product"
],
"url": "https://github.com/bytedance/InfiniStore/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-04T20:15:15.000Z",
"value": "VulDB entry last update"
}
],
"title": "bytedance InfiniStore KV Map infinistore.h purge_kv_map algorithmic complexity"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-11312",
"datePublished": "2026-06-05T00:30:14.091Z",
"dateReserved": "2026-06-04T18:10:12.303Z",
"dateUpdated": "2026-06-05T13:12:50.570Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-10878 (GCVE-0-2026-10878)
Vulnerability from cvelistv5 – Published: 2026-06-05 00:00 – Updated: 2026-06-05 19:28
VLAI
Title
D-Link DWR-M920 formSmsManage sub_41C8E8 command injection
Summary
A vulnerability was detected in D-Link DWR-M920 1.1.50/1.1.70. Affected is the function sub_41C8E8 of the file /boafrm/formSmsManage. Performing a manipulation of the argument action_value results in command injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368368 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/368368/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-10878 | third-party-advisory |
| https://vuldb.com/submit/832154 | third-party-advisory |
| https://github.com/7u7777/Dlink/blob/DWR-M920/for… | exploit |
| https://www.dlink.com/ | product |
Impacted products
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-10878",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-05T19:27:49.229788Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-05T19:28:05.511Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:h:d-link:dwr-m920:*:*:*:*:*:*:*:*"
],
"product": "DWR-M920",
"vendor": "D-Link",
"versions": [
{
"status": "affected",
"version": "1.1.50"
},
{
"status": "affected",
"version": "1.1.70"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "kkff33 (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in D-Link DWR-M920 1.1.50/1.1.70. Affected is the function sub_41C8E8 of the file /boafrm/formSmsManage. Performing a manipulation of the argument action_value results in command injection. The attack is possible to be carried out remotely. The exploit is now public and may be used."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-77",
"description": "Command Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-05T00:00:17.909Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368368 | D-Link DWR-M920 formSmsManage sub_41C8E8 command injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/368368"
},
{
"name": "VDB-368368 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368368/cti"
},
{
"name": "CVE-2026-10878 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-10878"
},
{
"name": "Submit #832154 | D-Link DWR-M920 1.1.50,1.1.70 Command Injection and stack overflow",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/832154"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/7u7777/Dlink/blob/DWR-M920/formSmsManage.md"
},
{
"tags": [
"product"
],
"url": "https://www.dlink.com/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-04T17:45:39.000Z",
"value": "VulDB entry last update"
}
],
"title": "D-Link DWR-M920 formSmsManage sub_41C8E8 command injection"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-10878",
"datePublished": "2026-06-05T00:00:17.909Z",
"dateReserved": "2026-06-04T15:40:34.401Z",
"dateUpdated": "2026-06-05T19:28:05.511Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-10877 (GCVE-0-2026-10877)
Vulnerability from cvelistv5 – Published: 2026-06-04 23:45 – Updated: 2026-06-04 23:45 X_Freeware
VLAI
Title
SourceCodester Ship Ferry Ticket Reservation System Admin Login login.php sql injection
Summary
A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System up to 1.0. This impacts an unknown function of the file /admin/login.php of the component Admin Login. Such manipulation of the argument Username leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368367 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/368367/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-10877 | third-party-advisory |
| https://vuldb.com/submit/831871 | third-party-advisory |
| https://medium.com/@hemantrajbhati5555/sql-inject… | broken-linkexploit |
| https://www.sourcecodester.com/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| SourceCodester | Ship Ferry Ticket Reservation System |
Affected:
1.0
cpe:2.3:a:sourcecodester:ship_ferry_ticket_reservation_system:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:sourcecodester:ship_ferry_ticket_reservation_system:*:*:*:*:*:*:*:*"
],
"modules": [
"Admin Login"
],
"product": "Ship Ferry Ticket Reservation System",
"vendor": "SourceCodester",
"versions": [
{
"status": "affected",
"version": "1.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Hemant Raj Bhati (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System up to 1.0. This impacts an unknown function of the file /admin/login.php of the component Admin Login. Such manipulation of the argument Username leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-04T23:45:10.256Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368367 | SourceCodester Ship Ferry Ticket Reservation System Admin Login login.php sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/368367"
},
{
"name": "VDB-368367 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368367/cti"
},
{
"name": "CVE-2026-10877 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-10877"
},
{
"name": "Submit #831871 | SourceCodester Ship/Ferry Ticket Reservation System 1.0 SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/831871"
},
{
"tags": [
"broken-link",
"exploit"
],
"url": "https://medium.com/@hemantrajbhati5555/sql-injection-in-authentication-mechanism-leads-to-authentication-bypass-65177ce7a41c"
},
{
"tags": [
"product"
],
"url": "https://www.sourcecodester.com/"
}
],
"tags": [
"x_freeware"
],
"timeline": [
{
"lang": "en",
"time": "2026-06-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-04T17:42:19.000Z",
"value": "VulDB entry last update"
}
],
"title": "SourceCodester Ship Ferry Ticket Reservation System Admin Login login.php sql injection"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-10877",
"datePublished": "2026-06-04T23:45:10.256Z",
"dateReserved": "2026-06-04T15:37:11.807Z",
"dateUpdated": "2026-06-04T23:45:10.256Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-10876 (GCVE-0-2026-10876)
Vulnerability from cvelistv5 – Published: 2026-06-04 23:30 – Updated: 2026-06-04 23:30 X_Freeware
VLAI
Title
SourceCodester Ship Ferry Ticket Reservation System admin improper authorization
Summary
A weakness has been identified in SourceCodester Ship Ferry Ticket Reservation System 1.0. This affects an unknown function of the file /admin/. This manipulation of the argument page causes improper authorization. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368366 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/368366/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-10876 | third-party-advisory |
| https://vuldb.com/submit/831870 | third-party-advisory |
| https://medium.com/@hemantrajbhati5555/missing-au… | broken-linkexploit |
| https://www.sourcecodester.com/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| SourceCodester | Ship Ferry Ticket Reservation System |
Affected:
1.0
cpe:2.3:a:sourcecodester:ship_ferry_ticket_reservation_system:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:sourcecodester:ship_ferry_ticket_reservation_system:*:*:*:*:*:*:*:*"
],
"product": "Ship Ferry Ticket Reservation System",
"vendor": "SourceCodester",
"versions": [
{
"status": "affected",
"version": "1.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Hemant Raj Bhati (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in SourceCodester Ship Ferry Ticket Reservation System 1.0. This affects an unknown function of the file /admin/. This manipulation of the argument page causes improper authorization. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-285",
"description": "Improper Authorization",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-266",
"description": "Incorrect Privilege Assignment",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-04T23:30:10.693Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368366 | SourceCodester Ship Ferry Ticket Reservation System admin improper authorization",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/368366"
},
{
"name": "VDB-368366 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368366/cti"
},
{
"name": "CVE-2026-10876 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-10876"
},
{
"name": "Submit #831870 | SourceCodester Ship/Ferry Ticket Reservation System 1.0 Broken Access Control",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/831870"
},
{
"tags": [
"broken-link",
"exploit"
],
"url": "https://medium.com/@hemantrajbhati5555/missing-authorization-in-sourcecodester-ship-ferry-ticket-reservation-system-leads-to-unauthorized-7783134d6596"
},
{
"tags": [
"product"
],
"url": "https://www.sourcecodester.com/"
}
],
"tags": [
"x_freeware"
],
"timeline": [
{
"lang": "en",
"time": "2026-06-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-04T17:42:16.000Z",
"value": "VulDB entry last update"
}
],
"title": "SourceCodester Ship Ferry Ticket Reservation System admin improper authorization"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-10876",
"datePublished": "2026-06-04T23:30:10.693Z",
"dateReserved": "2026-06-04T15:37:09.025Z",
"dateUpdated": "2026-06-04T23:30:10.693Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-10875 (GCVE-0-2026-10875)
Vulnerability from cvelistv5 – Published: 2026-06-04 23:00 – Updated: 2026-06-04 23:00 X_Freeware
VLAI
Title
projectworlds Online Art Gallery Shop Project adminHome.ph sql injection
Summary
A security flaw has been discovered in projectworlds Online Art Gallery Shop Project 1.0. The impacted element is an unknown function of the file /admin/adminHome.ph. The manipulation of the argument social_twitter results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
Severity
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368365 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/368365/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-10875 | third-party-advisory |
| https://vuldb.com/submit/831869 | third-party-advisory |
| https://github.com/shq3526/cve/issues/10 | exploitissue-tracking |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| projectworlds | Online Art Gallery Shop Project |
Affected:
1.0
cpe:2.3:a:projectworlds:online_art_gallery_shop_project:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:projectworlds:online_art_gallery_shop_project:*:*:*:*:*:*:*:*"
],
"product": "Online Art Gallery Shop Project",
"vendor": "projectworlds",
"versions": [
{
"status": "affected",
"version": "1.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "shqnq (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in projectworlds Online Art Gallery Shop Project 1.0. The impacted element is an unknown function of the file /admin/adminHome.ph. The manipulation of the argument social_twitter results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-04T23:00:17.312Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368365 | projectworlds Online Art Gallery Shop Project adminHome.ph sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/368365"
},
{
"name": "VDB-368365 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368365/cti"
},
{
"name": "CVE-2026-10875 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-10875"
},
{
"name": "Submit #831869 | projectworlds.com Online Art Gallery Shop Project 1.0 SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/831869"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/shq3526/cve/issues/10"
}
],
"tags": [
"x_freeware"
],
"timeline": [
{
"lang": "en",
"time": "2026-06-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-04T17:39:52.000Z",
"value": "VulDB entry last update"
}
],
"title": "projectworlds Online Art Gallery Shop Project adminHome.ph sql injection"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-10875",
"datePublished": "2026-06-04T23:00:17.312Z",
"dateReserved": "2026-06-04T15:34:44.571Z",
"dateUpdated": "2026-06-04T23:00:17.312Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-10874 (GCVE-0-2026-10874)
Vulnerability from cvelistv5 – Published: 2026-06-04 22:45 – Updated: 2026-06-04 22:45 X_Freeware
VLAI
Title
projectworlds Online Art Gallery Shop Project adminHome.php sql injection
Summary
A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown function of the file /admin/adminHome.php. The manipulation of the argument social_insta leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.
Severity
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368364 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/368364/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-10874 | third-party-advisory |
| https://vuldb.com/submit/831868 | third-party-advisory |
| https://github.com/shq3526/cve/issues/9 | exploitissue-tracking |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| projectworlds | Online Art Gallery Shop Project |
Affected:
1.0
cpe:2.3:a:projectworlds:online_art_gallery_shop_project:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:projectworlds:online_art_gallery_shop_project:*:*:*:*:*:*:*:*"
],
"product": "Online Art Gallery Shop Project",
"vendor": "projectworlds",
"versions": [
{
"status": "affected",
"version": "1.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "shqnq (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown function of the file /admin/adminHome.php. The manipulation of the argument social_insta leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "SQL Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-04T22:45:10.536Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368364 | projectworlds Online Art Gallery Shop Project adminHome.php sql injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/368364"
},
{
"name": "VDB-368364 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368364/cti"
},
{
"name": "CVE-2026-10874 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-10874"
},
{
"name": "Submit #831868 | projectworlds.com Online Art Gallery Shop Project 1.0 SQL Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/831868"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/shq3526/cve/issues/9"
}
],
"tags": [
"x_freeware"
],
"timeline": [
{
"lang": "en",
"time": "2026-06-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-04T17:39:49.000Z",
"value": "VulDB entry last update"
}
],
"title": "projectworlds Online Art Gallery Shop Project adminHome.php sql injection"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-10874",
"datePublished": "2026-06-04T22:45:10.536Z",
"dateReserved": "2026-06-04T15:34:39.819Z",
"dateUpdated": "2026-06-04T22:45:10.536Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-10873 (GCVE-0-2026-10873)
Vulnerability from cvelistv5 – Published: 2026-06-04 22:30 – Updated: 2026-06-05 20:05
VLAI
Title
Shibby Tomato Web UI rstats rstats_path os command injection
Summary
A vulnerability was determined in Shibby Tomato 1.28.0000. Impacted is the function rstats_path of the file /bin/rstats of the component Web UI. Executing a manipulation can lead to os command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This project is superseded by FreshTomato.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368363 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/368363/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-10873 | third-party-advisory |
| https://vuldb.com/submit/831867 | third-party-advisory |
| https://vuldb.com/submit/831866 | third-party-advisory |
| https://gitee.com/WH-YHUST/tomato-rc-nvram-cve/bl… | related |
| https://gitee.com/WH-YHUST/tomato-rc-nvram-cve/bl… | broken-linkexploit |
Impacted products
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-10873",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-05T20:05:02.587591Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-05T20:05:07.275Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://gitee.com/WH-YHUST/tomato-rc-nvram-cve/blob/master/gitee-cve-disclosure/advisories/en/05-rstats.md"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:shibby:tomato:*:*:*:*:*:*:*:*"
],
"modules": [
"Web UI"
],
"product": "Tomato",
"vendor": "Shibby",
"versions": [
{
"status": "affected",
"version": "1.28.0000"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "WH-YHUST (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was determined in Shibby Tomato 1.28.0000. Impacted is the function rstats_path of the file /bin/rstats of the component Web UI. Executing a manipulation can lead to os command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This project is superseded by FreshTomato."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 8.3,
"vectorString": "AV:N/AC:L/Au:M/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "OS Command Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-77",
"description": "Command Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-04T22:30:13.356Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368363 | Shibby Tomato Web UI rstats rstats_path os command injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/368363"
},
{
"name": "VDB-368363 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368363/cti"
},
{
"name": "CVE-2026-10873 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-10873"
},
{
"name": "Submit #831867 | Tomato Tomato by Shibby 1.28.0000 MIPSR2-124 K26 USB Big-VPN command injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/831867"
},
{
"name": "Submit #831866 | Tomato Tomato by Shibby 1.28.0000 MIPSR2-124 K26 USB Big-VPN command injection (Duplicate)",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/831866"
},
{
"tags": [
"related"
],
"url": "https://gitee.com/WH-YHUST/tomato-rc-nvram-cve/blob/master/gitee-cve-disclosure/advisories/en/05-rstats.md"
},
{
"tags": [
"broken-link",
"exploit"
],
"url": "https://gitee.com/WH-YHUST/tomato-rc-nvram-cve/blob/master/gitee-cve-disclosure/advisories/zh/05-rstats.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-04T17:37:21.000Z",
"value": "VulDB entry last update"
}
],
"title": "Shibby Tomato Web UI rstats rstats_path os command injection"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-10873",
"datePublished": "2026-06-04T22:30:13.356Z",
"dateReserved": "2026-06-04T15:32:05.935Z",
"dateUpdated": "2026-06-05T20:05:07.275Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-10872 (GCVE-0-2026-10872)
Vulnerability from cvelistv5 – Published: 2026-06-04 22:15 – Updated: 2026-06-05 19:29
VLAI
Title
Shibby Tomato Web UI rc start_vpnserver os command injection
Summary
A vulnerability was found in Shibby Tomato 1.28.0000. This issue affects the function start_vpnserver of the file /sbin/rc of the component Web UI. Performing a manipulation results in os command injection. The attack can be initiated remotely. The exploit has been made public and could be used. This project is superseded by FreshTomato.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368362 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/368362/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-10872 | third-party-advisory |
| https://vuldb.com/submit/831858 | third-party-advisory |
| https://gitee.com/WH-YHUST/tomato-rc-nvram-cve/bl… | related |
| https://gitee.com/WH-YHUST/tomato-rc-nvram-cve/bl… | exploit |
Impacted products
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-10872",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-05T19:29:15.549826Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-05T19:29:31.527Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:shibby:tomato:*:*:*:*:*:*:*:*"
],
"modules": [
"Web UI"
],
"product": "Tomato",
"vendor": "Shibby",
"versions": [
{
"status": "affected",
"version": "1.28.0000"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "WH-YHUST (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in Shibby Tomato 1.28.0000. This issue affects the function start_vpnserver of the file /sbin/rc of the component Web UI. Performing a manipulation results in os command injection. The attack can be initiated remotely. The exploit has been made public and could be used. This project is superseded by FreshTomato."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 8.3,
"vectorString": "AV:N/AC:L/Au:M/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "OS Command Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-77",
"description": "Command Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-04T22:15:15.209Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368362 | Shibby Tomato Web UI rc start_vpnserver os command injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/368362"
},
{
"name": "VDB-368362 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368362/cti"
},
{
"name": "CVE-2026-10872 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-10872"
},
{
"name": "Submit #831858 | Tomato Tomato Firmware Shibby Tomato MIPS32; image d2e251333c48...; /sbin/rc MD5 a48002cdf3cda9452a5b9712edd179d2 OS Command Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/831858"
},
{
"tags": [
"related"
],
"url": "https://gitee.com/WH-YHUST/tomato-rc-nvram-cve/blob/master/gitee-cve-disclosure/advisories/en/03-start_vpnserver.md"
},
{
"tags": [
"exploit"
],
"url": "https://gitee.com/WH-YHUST/tomato-rc-nvram-cve/blob/master/gitee-cve-disclosure/advisories/zh/03-start_vpnserver.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-04T17:37:17.000Z",
"value": "VulDB entry last update"
}
],
"title": "Shibby Tomato Web UI rc start_vpnserver os command injection"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-10872",
"datePublished": "2026-06-04T22:15:15.209Z",
"dateReserved": "2026-06-04T15:32:03.191Z",
"dateUpdated": "2026-06-05T19:29:31.527Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-10871 (GCVE-0-2026-10871)
Vulnerability from cvelistv5 – Published: 2026-06-04 22:00 – Updated: 2026-06-04 22:00
VLAI
Title
Shibby Tomato Web UI rc start_6rd_tunnel os command injection
Summary
A vulnerability has been found in Shibby Tomato 1.28.0000. This vulnerability affects the function start_6rd_tunnel of the file /sbin/rc of the component Web UI. Such manipulation of the argument ipv6_6rd_borderrelay leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This project is superseded by FreshTomato.
Severity
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/368361 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/368361/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-10871 | third-party-advisory |
| https://vuldb.com/submit/831857 | third-party-advisory |
| https://gitee.com/WH-YHUST/tomato-rc-nvram-cve/bl… | related |
| https://gitee.com/WH-YHUST/tomato-rc-nvram-cve/bl… | exploit |
Impacted products
Credits
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:shibby:tomato:*:*:*:*:*:*:*:*"
],
"modules": [
"Web UI"
],
"product": "Tomato",
"vendor": "Shibby",
"versions": [
{
"status": "affected",
"version": "1.28.0000"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "WH-YHUST (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been found in Shibby Tomato 1.28.0000. This vulnerability affects the function start_6rd_tunnel of the file /sbin/rc of the component Web UI. Such manipulation of the argument ipv6_6rd_borderrelay leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This project is superseded by FreshTomato."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 8.3,
"vectorString": "AV:N/AC:L/Au:M/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "OS Command Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-77",
"description": "Command Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-04T22:00:15.468Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-368361 | Shibby Tomato Web UI rc start_6rd_tunnel os command injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/368361"
},
{
"name": "VDB-368361 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/368361/cti"
},
{
"name": "CVE-2026-10871 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-10871"
},
{
"name": "Submit #831857 | Tomato Tomato Firmware Shibby Tomato MIPS32; image d2e251333c48...; /sbin/rc MD5 a48002cdf3cda9452a5b9712edd179d2 OS Command Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/831857"
},
{
"tags": [
"related"
],
"url": "https://gitee.com/WH-YHUST/tomato-rc-nvram-cve/blob/master/gitee-cve-disclosure/advisories/en/02-start_6rd_tunnel.md"
},
{
"tags": [
"exploit"
],
"url": "https://gitee.com/WH-YHUST/tomato-rc-nvram-cve/blob/master/gitee-cve-disclosure/advisories/zh/02-start_6rd_tunnel.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-04T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-04T17:37:14.000Z",
"value": "VulDB entry last update"
}
],
"title": "Shibby Tomato Web UI rc start_6rd_tunnel os command injection"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-10871",
"datePublished": "2026-06-04T22:00:15.468Z",
"dateReserved": "2026-06-04T15:32:00.393Z",
"dateUpdated": "2026-06-04T22:00:15.468Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}