Skip to content
OpenAdvisories

Vendor

clidey

3 known vulnerabilities.

Products

whodb 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.7
    CVE-2026-112005

    WhoDB 0.104.0 before 0.135.0 Arbitrary File Read/Write via DuckDB Query Editor

    WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to read and write arbitrary host files by running DuckDB filesystem functions through the query editor. Attackers can log in to a DuckDB file without credentials…

    clidey whodb
  • High 8.6
    CVE-2025-24787

    Parameter injection in DB connection URIs leading to local file inclusion in WhoDB

    WhoDB is an open source database management tool. In affected versions the application is vulnerable to parameter injection in database connection strings, which allows an attacker to read local files on the machine the application is running on. The applicat…

    clidey whodb github.com/clidey/whodb/core Go