hieuPenguinnn

ThriveX-Server through 4.0 Missing Authorization via Article Retrieval Endpoints

Wukong AICRM through 20260610 Missing Authorization in System Configuration APIs Exposes Stored AI Provider Keys

ai-fusion-video through 1.2.0 Insecure Direct Object Reference in Generation Task Item Endpoints

Kavita 0.9.0 through 0.9.1.4 SSRF Blocklist Bypass via upload-cbl-file Endpoint

Elio through 1.13.0 Insecure Temporary File Creation in External Preview Command Capture

fuintCatering through commit 122c9e6 IDOR via /clientApi/refund/detail

FastBee through 2.1.0 IDOR via DeviceController /iot/device Endpoints

yshopmall through 2.0.0 IDOR via Member Address API in UserAddressController

oms-erp through PRE Missing Authentication via skyer-goods es-test Endpoints

RuoYi-Cloud-Plus through 6.0.0 IDOR via DELETE /auth/unlock/{socialId}