hieuPenguinnn

cool-admin-midway through 8.0.0 Missing Authorization via System Role Endpoints

SendPortal sendportal-core through 4.0.1 Cross-Workspace Tag Attachment via Subscriber Form

cool-admin-midway through 8.0.0 Authorization Bypass via /admin/sys/user Endpoints

ValueCell through 0.1.20 Unauthenticated SSRF via /api/v1/models/check

JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Console

APITable through 1.14.0-beta Authorization Bypass via GET /node/{nodeId}/description

Craftplan through 0.7.5 Missing Authorization via CRM Customer JSON:API and GraphQL

crmeb_java through 3.1 Authorization Bypass via Front Order Express and Refund Endpoints

BISHENG through 3.0.0-beta4 IDOR via /api/v1/knowledge/file_bbox

ClassroomIO through 1.0.0 IDOR via Course Submission Update, Grade and Delete Routes