Danielbrendel
Danielbrendel Security Releases - October 2026
danielbrendel-2026-10 Oct 1, 2026 Source: Vendor
Danielbrendel security advisories for October 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-108101
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
4 lines
Showing 1–4 of 4
CVE-2026-108101
BR2026-0000-029006
hortusfox-web
unclaimed
HortusFox (hortusfox-web) through 6.3 contains an unrestricted file upload vulnerability in PlantAttachmentModel that allows authenticated users to store files with client-supplied extensions under...
Credited as leediay153 from Viettel Post
CVE-2026-108101
BR2026-0000-029007
hortusfox-web
unclaimed
HortusFox (hortusfox-web) through 6.3 contains an unrestricted file upload vulnerability in PlantAttachmentModel that allows authenticated users to store files with client-supplied extensions under...
Credited as hackchang
CVE-2026-108100
BR2026-0000-031078
hortusfox-web
unclaimed
HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted include_info values to the /api/locations/list endpoint...
Credited as hackchang
CVE-2026-108100
BR2026-0000-031079
hortusfox-web
unclaimed
HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted include_info values to the /api/locations/list endpoint...
Credited as leediay153 from Viettel Post