https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 07:30:17 +0000 https://vulnerability.circl.lu/sighting/5bb71ef5-51b2-4df9-9776-eea11d736f75/export {"uuid": "5bb71ef5-51b2-4df9-9776-eea11d736f75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-108781", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxnemhottv2q", "content": "erzhongxmu JEEWMS 2026.09.27-W39 faces a MEDIUM severity SQL injection (CVE-2026-108781) via 'searchstr'. Exploit code is public. Add input validation now \u2014 no patch available. https://radar.offseq.com/threat/cve-2026-108781-sql-injection-in-erzhongxmu-jeewms-0d5532d438e847c4 #OffSeq #Vulnerabili...", "creation_timestamp": "2026-10-12T01:30:34.583894Z"} {"uuid": "5bb71ef5-51b2-4df9-9776-eea11d736f75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-108781", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxnemhottv2q", "content": "erzhongxmu JEEWMS 2026.09.27-W39 faces a MEDIUM severity SQL injection (CVE-2026-108781) via 'searchstr'. Exploit code is public. Add input validation now \u2014 no patch available. https://radar.offseq.com/threat/cve-2026-108781-sql-injection-in-erzhongxmu-jeewms-0d5532d438e847c4 #OffSeq #Vulnerabili...", "creation_timestamp": "2026-10-12T01:30:34.583894Z"} https://vulnerability.circl.lu/sighting/5bb71ef5-51b2-4df9-9776-eea11d736f75/export Mon, 12 Oct 2026 01:30:34 +0000 https://vulnerability.circl.lu/sighting/40cce0dd-2ed5-4819-972b-32db59677c41/export {"uuid": "40cce0dd-2ed5-4819-972b-32db59677c41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-108781", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117425348985763362", "content": "CVE-2026-108781: erzhongxmu JEEWMS v2026.09.27-W39 has a MEDIUM severity SQL injection in WmToMoveGoodsController.list via 'searchstr'. Remote exploit possible; vendor silent, exploit code public. Apply input filtering. https://radar.offseq.com/threat/cve-2026-108781-sql-injection-in-erzhongxmu-jeewms-0d5532d438e847c4 #OffSeq #SQLi #Vuln", "creation_timestamp": "2026-10-12T01:30:31.455154Z"} {"uuid": "40cce0dd-2ed5-4819-972b-32db59677c41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-108781", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117425348985763362", "content": "CVE-2026-108781: erzhongxmu JEEWMS v2026.09.27-W39 has a MEDIUM severity SQL injection in WmToMoveGoodsController.list via 'searchstr'. Remote exploit possible; vendor silent, exploit code public. Apply input filtering. https://radar.offseq.com/threat/cve-2026-108781-sql-injection-in-erzhongxmu-jeewms-0d5532d438e847c4 #OffSeq #SQLi #Vuln", "creation_timestamp": "2026-10-12T01:30:31.455154Z"} https://vulnerability.circl.lu/sighting/40cce0dd-2ed5-4819-972b-32db59677c41/export Mon, 12 Oct 2026 01:30:31 +0000 https://vulnerability.circl.lu/sighting/e363cf73-1c48-49ba-9d19-382f33e13a30/export {"uuid": "e363cf73-1c48-49ba-9d19-382f33e13a30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108781", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117425225341486499", "content": "CVE-2026-108781 erzhongxmu JEEWMS PDA WmToMoveGoodsController.java WmToMoveGoodsController.list sql injection A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function WmToMoveGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmToMoveGoodsController.java of the component PDA Interface. Performing a manipulation of the argument searchstr results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108781https://vuldb.com/vuln/416560https://vuldb.com/vuln/416560/ctihttps://vuldb.com/cve/CVE-2026-108781https://vuldb.com/submit/959640#erzhongxmu #JEEWMS#CVE_2026_108781#bot", "creation_timestamp": "2026-10-12T00:59:04.617899Z"} {"uuid": "e363cf73-1c48-49ba-9d19-382f33e13a30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108781", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117425225341486499", "content": "CVE-2026-108781 erzhongxmu JEEWMS PDA WmToMoveGoodsController.java WmToMoveGoodsController.list sql injection A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function WmToMoveGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmToMoveGoodsController.java of the component PDA Interface. Performing a manipulation of the argument searchstr results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108781https://vuldb.com/vuln/416560https://vuldb.com/vuln/416560/ctihttps://vuldb.com/cve/CVE-2026-108781https://vuldb.com/submit/959640#erzhongxmu #JEEWMS#CVE_2026_108781#bot", "creation_timestamp": "2026-10-12T00:59:04.617899Z"} https://vulnerability.circl.lu/sighting/e363cf73-1c48-49ba-9d19-382f33e13a30/export Mon, 12 Oct 2026 00:59:04 +0000