hieuPenguinnn

IETF Datatracker before 12.83.0 Cross-NomCom Authorization Bypass via Nomcom Views

REBUILD before 4.5.3 Authorization Bypass via Feeds Details and Comments Endpoints

ChatWiki before 2.10.0 Cross-Tenant IDOR via SaveFormField and UpdateFormRequired

Meelo through 3.13.1 Missing Authorization on Song, Track and Video Endpoints

SplitPro through 2.1.6 Authorization Bypass via user.getUserDetails tRPC Query

WPPConnect Server through 2.10.76 Unauthenticated Sticker Media Disclosure via /files

SplitPro through 2.1.6 Authorization Bypass via expense.getExpenseDetails

WebVirtCloud through commit bb920b0 Missing Authorization in REST API Migrate and Create Endpoints

eventyay-exhibition through commit f68888e Cross-Event Attendee Data Disclosure via Lead Creation API

Databasus 3.7.0 through 3.61.0 Account Takeover via Password Reset Brute-Force