George Chen

Determined Missing Authorization Check on Generic Task Endpoints

Next Terminal Missing Per-Asset Authorization on Portal Endpoints

phpIPAM Temporary Subnet Share Information Disclosure via Address Parameter

Hugging Face Transformers Path Traversal via Checkpoint Index

Crawlab Missing Authorization on Password Change Endpoint Allows Account Takeover

gdu Terminal Injection via Unstripped Escape Sequences

dua-cli Terminal Escape Sequence Injection via Marked Paths

streama Insecure Direct Object Reference via ViewingStatusController

NLTK TweetTokenizer URL Pattern Backtracks Catastrophically on Naked-Domain-Like Input

AgenticSeek Unauthenticated RCE via /query API Endpoint