hieuPenguinnn

Yiuman citrus through 0.15.0 ORDER BY SQL Injection via sortBy Parameter

Dromara Skyeye through commit 65d3ddcede70 SQL Injection via keyword Parameter

vhr through commit 03abbd3 Information Disclosure of Operator Password Hashes via GET /chat/hrs

ai-fusion-video through 1.2.0 Path Traversal in Media Upload subDir Parameter

frp 0.41.0 through 0.71.1 Missing Authentication for pprof Debug Endpoints

Wukong AICRM through 20260610 Missing Authorization in User and Role Management APIs

MateCloud through 5.0.8 Missing Authorization via /api/v1/admin/storage API

Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager retrieveFileStream

yshopmall through 2.0.0 IDOR via After-Sales API in StoreAfterSalesController

waynboot-mall through 2.0.0 IDOR via Mobile Order Endpoints