hieuPenguinnn

yudao-cloud through 2026.09 Data Permission Bypass via data-permission-enable Header

MrDoc through 1.1.1 Broken Access Control via manage_doc_share

Nexterm through 1.2.2-BETA Missing Authorization in Server Session Lifecycle Routes

Jpom through 2.11.12 Cross-Workspace Authorization Bypass via Docker Controllers

EasyImages2.0 through 2.8.6 Unauthenticated Path Traversal via down.php, thumb.php and info.php

rssant 1.9.0 through 1.9.1 Information Disclosure via publish.story_get Endpoint

madong-admin-saas through 5.1.4 Incorrect Authorization via /platformapi AccessTokenMiddleware

Chatify before 1.6.4 Pusher Authorization Bypass via /chat/auth Endpoint

Jpom through 2.11.12 Cross-Workspace Authorization Bypass via /node/ssh_command/batch

changelog.com before commit 7b35e829 Missing Authorization via Preview Routes