This site currently shows sample data for demonstration.
BDVDB
বাংলা

Advisories

Vulnerabilities that BDVDB has handled through its disclosure process, with affected versions, fixes and credit.

RSS feed · How we handle reports

AdvisoryIDVendorSeverityStatusPublished
Neve Pro Addon password-protected content bypassThemeisle / Neve Pro AddonHighFixed
Omega Solution Restro POS sale-invoice logic errorBDVDB-2026-396047Omega Solution / Restro POSMedium
Bdtask Garage 24 Garage Management Software Profile edit_profile cross site scriptingBDVDB-2026-396038Bdtask / Garage 24 Garage Management SoftwareLow
Bdtask Garage 24 Garage Management Software Backend improper authorizationBDVDB-2026-396037Bdtask / Garage 24 Garage Management SoftwareMedium
bewCloud passkey login accepts a replayed WebAuthn assertionbewCloud / bewCloudHighFixed
bewCloud public file shares path traversal allows unauthenticated file readbewCloud / bewCloudHighFixed
Omega Solution CoinEx Crypto Ticket Attachment Upload ticket cross site scriptingBDVDB-2026-382597Omega Solution / CoinEx CryptoLow
Omega Solution CoinEx Crypto Support Ticket API customer information disclosureBDVDB-2026-382596Omega Solution / CoinEx CryptoMedium
Omega Solution CoinEx Crypto Customer Profile API customer authorizationBDVDB-2026-382594Omega Solution / CoinEx CryptoMedium
Omega Solution CoinEx Crypto Customer Information API customer-currency authorizationBDVDB-2026-382595Omega Solution / CoinEx CryptoMedium
Omega Solution HRM OS SVG File Upload view cross site scriptingBDVDB-2026-377503Omega Solution / HRM OSLow
Omega Solution HRM OS Role Permission Retrieval Endpoint permission resource injectionBDVDB-2026-377502Omega Solution / HRM OSMedium
Omega Solution HRM OS Role Permission API permission missing authenticationBDVDB-2026-377504Omega Solution / HRM OSMedium
Omega Solution FBP Fulfillment by People User Profile API user authorizationBDVDB-2026-377505Omega Solution / FBP Fulfillment by PeopleMedium
CodeCanyon TimeCamp Integration for CRM Contact Information Update save_contact authorizationBDVDB-2026-360446CodeCanyon / TimeCamp Integration for CRMMedium
automad Password Reset Endpoint UserController.php requestPasswordResetToken response discrepancyBDVDB-2026-360445/ automadLow
BichitroGan ISP Billing Software Profile users-view cross site scriptingBDVDB-2026-327745BichitroGan / ISP Billing SoftwareLow
BichitroGan ISP Billing Software Pool List add cross site scriptingBDVDB-2026-327746BichitroGan / ISP Billing SoftwareLow
BichitroGan ISP Billing Software Customer edit cross site scriptingBDVDB-2026-327744BichitroGan / ISP Billing SoftwareLow
BichitroGan ISP Billing Software Endpoint users-view resource injectionBDVDB-2026-323587BichitroGan / ISP Billing SoftwareMedium
Bdtask SalesERP Administrative Endpoint improper authorizationBDVDB-2026-312969Bdtask / SalesERPMedium
Bdtask Bhojon All-In-One Restaurant Management System User Information profile cross site scriptingBDVDB-2026-312970Bdtask / Bhojon All-In-One Restaurant Management SystemLow
Bdtask Bhojon All-In-One Restaurant Management System Checkout placeorder logic errorBDVDB-2026-312971Bdtask / Bhojon All-In-One Restaurant Management SystemMedium
Bdtask Bhojon All-In-One Restaurant Management System Add-to-Cart Submission Endpoint addtocart logic errorBDVDB-2026-312972Bdtask / Bhojon All-In-One Restaurant Management SystemMedium
Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution submit_checkout behavioral workflowBDVDB-2026-302172Bdtask / Isshue Multi Store eCommerce Shopping Cart SolutionMedium
Bdtask Flight Booking Software Edit Profile edit unrestricted uploadBDVDB-2026-302171Bdtask / Flight Booking SoftwareMedium
Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System edit_profile cross site scriptingBDVDB-2026-302097Bdtask / Wholesale Inventory Control and Inventory Management SystemLow
Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System cross-site request forgeryBDVDB-2026-302096Bdtask / Wholesale Inventory Control and Inventory Management SystemMedium
Bdtask/CodeCanyon SalesERP User Profile edit_profile cross site scriptingBDVDB-2026-302095Bdtask / SalesERPLow
Bdtask/CodeCanyon SalesERP cross-site request forgeryBDVDB-2026-302094Bdtask / SalesERPMedium
Bdtask/CodeCanyon News365 profile unrestricted uploadBDVDB-2026-302100Bdtask / News365Medium
Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution manage_customer cross site scriptingBDVDB-2026-302101Bdtask / Isshue Multi Store eCommerce Shopping Cart SolutionLow
Bdtask Wholesale Inventory Control and Inventory Management System edit_profile sql injectionBDVDB-2026-299533Bdtask / Wholesale Inventory Control and Inventory Management SystemMedium
Bdtask Pharmacy Management System User Profile edit_user authorizationBDVDB-2026-299534Bdtask / Pharmacy Management SystemMedium
Bdtask Flight Booking Software Package Information package-information unrestricted uploadBDVDB-2026-299473Bdtask / Flight Booking SoftwareMedium
Bdtask Flight Booking Software Deposit deposit unrestricted uploadBDVDB-2026-299472Bdtask / Flight Booking SoftwareMedium
Huashengdun WebSSH Login Page cross site scriptingBDVDB-2026-286780Huashengdun / WebSSHMedium
PHPGurukul User Registration & Login and User Management System user-profile.php sql injectionBDVDB-2026-286028PHPGurukul / User Registration & Login and User Management SystemHigh
PHPGurukul User Registration & Login and User Management System manage-users.php sql injectionBDVDB-2026-286029PHPGurukul / User Registration & Login and User Management SystemMedium
PHPGurukul Student Result Management System GET Parameter notice-details.php sql injectionBDVDB-2026-286020PHPGurukul / Student Result Management SystemHigh