Aggregator

Submit #767396 / VDB-349713

Submit #767883 / VDB-349655

Submit #767290 / VDB-349654

A vulnerability was found in xuxueli xxl-job up to 3.3.2 and classified as critical. This impacts an unknown function of the file source-code/src/main/java/com/xxl/job/admin/controller/JobInfoController.java. The manipulation results in server-side request forgery. This vulnerability is known as CVE-2026-3733. It is possible to launch the attack remotely. Furthermore, an exploit is available. The project maintainer closed the issue report with the following statement: "Access token security verification is required." (translated from Chinese)

Submit #767272 / VDB-349699

Submit #767264 / VDB-349657

Submit #767263 / VDB-349656

Submit #767262 / VDB-349651

Submit #767227 / VDB-349712

A vulnerability has been found in Tenda F453 1.0.0.3 and classified as critical. This affects the function strcpy of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. This vulnerability is traded as CVE-2026-3732. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as problematic, was found in libssh up to 0.11.3. The impacted element is the function sftp_extensions_get_name/sftp_extensions_get_data of the file src/sftp.c of the component SFTP Extension Name Handler. Executing a manipulation of the argument idx can lead to out-of-bounds read. This vulnerability appears as CVE-2026-3731. The attack may be performed from remote. There is no available exploit. You should upgrade the affected component.

Submit #767226 / VDB-349711

Name: CryptoNite CTF 2026 (an CryptoNite CTF event.)
Date: March 6, 2026, 5:30 a.m. — 07 March 2026, 11:30 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://tachyon.iittp.ac.in/ctf/
Rating weight: 22.11
Event organizers: bl4ckc4ts

A vulnerability described as problematic has been identified in PHPJabbers Night Club Booking Software 1.0. This affects an unknown function of the component Forgot Password Handler. Executing a manipulation can lead to denial of service. This vulnerability is tracked as CVE-2023-51321. The attack can be launched remotely. No exploit exists.

Submit #767222 / VDB-349710

Submit #767120 / VDB-349709

A vulnerability, which was classified as critical, has been found in itsourcecode Free Hotel Reservation System 1.0. The affected element is an unknown function of the file /hotel/admin/mod_amenities/index.php?view=edit. Performing a manipulation of the argument amen_id/rmtype_id results in sql injection. This vulnerability is reported as CVE-2026-3730. The attack is possible to be carried out remotely. Moreover, an exploit is present.