hieuPenguinnn

Jeepay through 3.2.9 IDOR via DELETE /api/divisionReceivers/{recordId}

AllData through 0.7.1 Unauthenticated JDBC Injection via /jobJdbcDatasource/test

CoAI through 4.0.0 Unauthenticated Path Traversal via Archive Download Endpoints

Xiaozhi-esp32-server-java through 6.1.0 Authentication Bypass via OTA Endpoint Token Issuance

ZKEACMS through 4.4 Authentication Bypass via Hard-Coded JWT Signing Key

BuildAdmin through 2.3.9 IDOR via routine/adminInfo/edit id Parameter

sshportal through 1.19.5 Missing Authorization in 'key show' Command Exposes Private Keys

Misaka Danmu Server through 2.8.9 Authentication Bypass via Config-History Rollback

53AIHub through 0.5.3 Missing Authentication via PUT /api/enterprises/:id

SiteServer SSCMS through 7.4.0 Cross-Site Authorization Bypass via Channels API