hieuPenguinnn

RuoYi-Vue-Plus through 6.0.0 Data-Scope Bypass via /system/user/list/dept/{deptId}

UNIT3D through 9.2.0 Private Playlist Disclosure via Playlist Zip Download

NexoPOS through 6.3.0 Missing Authorization via Cash Register Session Actions

loonflow before r3.2.3 IDOR via ticket_flow_history Endpoint

Stonewuu ai-fusion-video before 1.3.0 IDOR via Project, Asset and Script Controllers

langchain4j-aideepin before 3.31.0 IDOR via GET /character/{uuid}

CoopCycle coopcycle-web before 6.20.1 IDOR via Incident Resource and Action Endpoint

Foxel through 2.4.0 Unauthenticated File Read via /api/fs/stream and /api/fs/thumb

xianyu-auto-reply-fix through 2.0.7 Unauthenticated Message Sending via /send-message

FastBee through 2.1.0 IDOR via /iot/product By-ID Endpoints