← All credits
Yaqi Chao
145 vulnerability records and advisories credit this contributor.
CVE-2026-109187
jshERP through 3.6 Information Disclosure via /platformConfig/getInfoByKey
CVE-2026-109182
jshERP through 3.6 Incorrect Authorization via /supplier/exportExcel
CVE-2026-109177
MoguBlog through 6.2 Broken Access Control via networkDisk moveFile and edit
CVE-2026-109172
yshop-crm through 2.1.3 Missing Authorization via contract-receivables check endpoint
CVE-2026-109165
TDuck survey form through 6.0 Authorization Bypass via User-Controlled Form Key in POST /user/form/item/batch/create
CVE-2026-108885
JeecgBoot through 3.9.5 Missing Authorization via /sys/message/sysMessage/delete
CVE-2026-108880
JeecgBoot through 3.9.5 Missing Authorization via /sys/dict/editDictByLowAppId
CVE-2026-108875
JeecgBoot through 3.9.5 Missing Authorization via /sys/user/addSysUserGroup
CVE-2026-108870
JeecgBoot through 3.9.5 Missing Authorization via POST /sys/role/datarule
CVE-2026-108605
JeecgBoot through 3.9.5 Missing Authorization via /airag/ocr/edit Endpoint