https://vulnerability.circl.lu/sightings/feed 2026-10-12T07:30:17.109694+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/5bb71ef5-51b2-4df9-9776-eea11d736f75/export 2026-10-12T07:30:17.135934+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5bb71ef5-51b2-4df9-9776-eea11d736f75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-108781", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxnemhottv2q", "content": "erzhongxmu JEEWMS 2026.09.27-W39 faces a MEDIUM severity SQL injection (CVE-2026-108781) via 'searchstr'. Exploit code is public. Add input validation now \u2014 no patch available. https://radar.offseq.com/threat/cve-2026-108781-sql-injection-in-erzhongxmu-jeewms-0d5532d438e847c4 #OffSeq #Vulnerabili...", "creation_timestamp": "2026-10-12T01:30:34.583894Z"} 2026-10-12T01:30:34.583894+00:00 https://vulnerability.circl.lu/sighting/40cce0dd-2ed5-4819-972b-32db59677c41/export 2026-10-12T07:30:17.137812+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "40cce0dd-2ed5-4819-972b-32db59677c41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-108781", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117425348985763362", "content": "CVE-2026-108781: erzhongxmu JEEWMS v2026.09.27-W39 has a MEDIUM severity SQL injection in WmToMoveGoodsController.list via 'searchstr'. Remote exploit possible; vendor silent, exploit code public. Apply input filtering. https://radar.offseq.com/threat/cve-2026-108781-sql-injection-in-erzhongxmu-jeewms-0d5532d438e847c4 #OffSeq #SQLi #Vuln", "creation_timestamp": "2026-10-12T01:30:31.455154Z"} 2026-10-12T01:30:31.455154+00:00 https://vulnerability.circl.lu/sighting/e363cf73-1c48-49ba-9d19-382f33e13a30/export 2026-10-12T07:30:17.137967+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e363cf73-1c48-49ba-9d19-382f33e13a30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108781", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117425225341486499", "content": "CVE-2026-108781 erzhongxmu JEEWMS PDA WmToMoveGoodsController.java WmToMoveGoodsController.list sql injection A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function WmToMoveGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmToMoveGoodsController.java of the component PDA Interface. Performing a manipulation of the argument searchstr results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108781https://vuldb.com/vuln/416560https://vuldb.com/vuln/416560/ctihttps://vuldb.com/cve/CVE-2026-108781https://vuldb.com/submit/959640#erzhongxmu #JEEWMS#CVE_2026_108781#bot", "creation_timestamp": "2026-10-12T00:59:04.617899Z"} 2026-10-12T00:59:04.617899+00:00