← All credits

Yaqi Chao

145 vulnerability records and advisories credit this contributor.

CVE-2026-109180

jshERP through 3.6 Authorization Bypass via User-Controlled Warehouse IDs

CVE-2026-109185

jshERP through 3.6 Privilege Escalation via PUT /user/updateUser

CVE-2026-109168

lamp-cloud through 5.10.1 IDOR via /anyone/appendix/listFileByBizId

CVE-2026-108867

JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserRoleSetById

CVE-2026-108872

JeecgBoot through 3.9.5 Missing Authorization via /sys/user/batchEditUsers

CVE-2026-108877

JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/delete

CVE-2026-108882

JeecgBoot through 3.9.5 Missing Authorization via /sys/position/removePositionUser

CVE-2026-108887

JeecgBoot through 3.9.5 Missing Authorization via /sys/comment/exportXls

CVE-2026-109174

MoguBlog through 6.2 Credential Disclosure via /oauth/getSystemConfig

CVE-2026-109179

jshERP through 3.6 Missing Authorization via /log/list and /log/info