hieuPenguinnn

Grida through 0.0.24 Missing Authorization in Forms File-Preview API

HuLa-Server through 3.0.7 IDOR via /user/friend/page Friend List Disclosure

abp-next-admin 10.4.0 through 10.7.0 Cross-Tenant File Disclosure via Blob Download-By-Name

madong-admin-saas through 5.1.4 Missing Authentication via Platform Tenant Management API

ape-volo-admin before 3.6.1 Hardcoded JWT Signing Key Authentication Bypass

Tamery (Conar) 0.26.1 before 0.99.0 Authorization Bypass via chatsMessages.update

OpenCSG CSGHub through v2.6.0-ce Unauthenticated Private Repository File Read via Resolve Route

MuseBot before 2.0.0 Authentication Bypass via Hard-Coded Session Key

CoreShop through 1.5.5 SQL Injection via order Parameter in Agent/GetGoodsPageList

BlueKing CMDB through 3.14.6 Missing Authorization via /api/v3/hosts/search/asstdetail