hieuPenguinnn

yshop-crm through 2.1.3 IDOR via CRM customer by-id endpoints

WhaTicket Community through commit cf04795 Admin Self-Registration via /auth/signup

Archon 0.2.13 through 0.11.1 Missing Authentication via /api/* Control API

HUIZHI ChargeOS cloud through 3.0.9 Unpaid Wallet Credit via /pay/xcxRecharge

smart-sso through 2.1.1 OAuth2 Authorization Code Theft via Unvalidated redirectUri

WHartTest through 2.8.1 Missing Authentication on UI-Automation WebSocket Endpoints

netdisk-fast-download through 0.4.8 Credential Disclosure via /v2/randomAuth

Jeepay through 3.2.9 IDOR via POST /api/mch/payConfigs

FastapiAdmin through 3.0 Hard-Coded JWT Secret Privilege Escalation

PickMall lilishop through 5.0.0 IDOR via /buyer/trade/receipt/{id}