hieuPenguinnn

Jpom through 2.11.12 Cross-Workspace Authorization Bypass via SshFileController

jshERP through 3.6 Missing Authorization via /user/batchSetStatus

thClaws through 0.141.0 Symlink Following File Write via POST /v1/inputs

Wanwu before 0.6.3 IDOR AppKey Deletion via DELETE /v1/appspace/app/key

mcp-go through 1.2.1 Denial of Service via Unbounded POST Body Buffering

iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resume Endpoint

Vifm 0.8.1-beta through 0.14.4 Unverified IPC FIFO Ownership Allows Cross-User Command Execution

Fossify File Manager through 1.6.2 Zip Slip Path Traversal via DecompressActivity

youlai-boot through 2.21.1 Missing Authorization in User Status Update Endpoint

SkillHub through 0.2.22 Missing Authorization in CLI Skill Delete Endpoint