← All credits
Yaqi Chao
145 vulnerability records and advisories credit this contributor.
CVE-2026-108607
JeecgBoot through 3.9.5 IDOR via deleteVideoRecord userId Parameter
CVE-2026-108612
JeecgBoot through 3.9.5 Missing Authorization via /airag/word/deleteBatch
CVE-2026-108617
JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate/add Endpoint
CVE-2026-108672
JeecgBoot through 3.9.5 Authorization Bypass via /airag/video/listByUser
CVE-2026-108677
JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserByName
CVE-2026-108689
Wukong AICRM through 20260610 Authorization Bypass via User-Controlled Session ID in POST /chat/send
CVE-2026-108702
CordysCRM through 1.9.3 Missing Authorization and Blind SSRF via Webhook Test
CVE-2026-108707
Wukong_HRM through commit 186115e Authentication Bypass via ParamAspect
CVE-2026-108869
JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendSysAnnouncement
CVE-2026-108674
JeecgBoot through 3.9.5 Missing Authorization via /openapi/queryById