hieuPenguinnn

JuggleIM im-server through 1.8.16 Weak Password Hashing via Unsalted SHA-1

Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/messages/conversation/:id

Papermark through 0.22.0 Missing Authorization in Data Room Viewer Group API

zhontai Admin.Core through 10.1.0 Authorization Bypass via User and Organization By-ID Endpoints

MinDoc through 2.2-beta.2 IDOR via /api/:key/content/:id GET Branch

ClassroomIO through 1.0.0 Incorrect Authorization via Lesson Update and Delete Routes

MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force

metasfresh through 5.175 Authorization Bypass via /rest/api/board REST API

ZenTao PMS through 22.6 Authorization Bypass via action::editComment

Dokploy through 0.30.8 Cross-Organization Authorization Bypass via port tRPC Router