Chia Min Jun Lennon

QloApps 1.7.0 Weak Password Hashing via MD5 in Tools.php

OpenHarness Improper Access Control via File Tools

OpenViking < 0.3.4 SSRF via /api/v1/resources

OpenViking < 0.3.3 Missing Authorization via Task Polling

Hermes WebUI < 0.51.44 Path Traversal via Session Import Endpoint

OpenViking Missing root_api_key Allows Anonymous ROOT Access

Hermes WebUI before 0.51.221 Path Traversal via Symlink Workspace Bypass

OpenViking .ovpack Import ZIP Slip Path Traversal

NanoClaw < 2.1.0 - Privilege Escalation via Forged Channel Approval Callback

NanoClaw < 2.1.17 - Privilege Escalation via Unauthorized create_agent System Action