hieuPenguinnn

Gitingest through 0.3.1 Arbitrary File Read via Symlink in Blob Ingestion

AstronRPA through 1.1.6 Cross-Tenant File Disclosure via /file/download

holaOS through 2026.822.1 Missing Authorization in Channel-Gateway Connectors

Blinko through 1.8.8 Private Attachment Read via /api/file Route

Sure 0.7.0 through 0.7.6-alpha.6 Missing Authorization via Transaction Bulk Update

TurboDocx html-to-docx through 1.23.1 SSRF via img src Remote Image Download

Colanode Server through 0.4.7 Path Traversal via Avatar Download Route

Shopizer through 3.2.5 Authorization Bypass via Product Review customerId

we-mp-rss through 1.5.3 Missing Authorization via Export File Download Endpoint

vlife through 2.0.1 Authentication Bypass via Hardcoded JWT Secret in TokenUtil