hieuPenguinnn

IceCMS through 4.1.5 SQL Injection via /WebArticle/findarticlesbynum

WIMOOR through commit ec86736 Authentication Bypass via Forged X-USERINFO Header

data-platform-open through commit efeacd3 Hardcoded AES Key for Datasource Passwords

OtterMind Nubase through 0.1.4 Missing Authentication in Storage Object API

99AI through 4.3.0 Unauthenticated Information Disclosure via chatLog exportExcel

Arkon through 0.9.2 Broken Access Control via Sources By-ID Routes

Open WES through 1.0.0 Broken Access Control via GlobalGatewayFilter Warehouse Scoping

Exrick XBoot through 3.3.4 Data-Scope Bypass via openDataFilter Parameter

AipexBase through commit 690adb9 SQL Injection via /api/data/invoke

IceCMS through 4.1.5 Missing Authentication via /User Administrative Endpoints