Chia Min Jun Lennon

radare2 < 6.1.4 Project Notes Path Traversal via Symlink

radare2 < 6.1.4 Project Deletion Path Traversal Directory Deletion

Nesquena Hermes WebUI Arbitrary File Deletion via Unvalidated session_id

Nesquena Hermes WebUI Environment Variable Credential Leakage via Profile Switch

nesquena hermes-webui Arbitrary Workspace Directory Access

HKUDS OpenHarness Insecure Default Remote Channel Allowlist

HKUDS OpenHarness Plugin Management Command Exposure

HKUDS OpenHarness Session Key Collision Privilege Escalation

Hermes WebUI < 0.51.521 - Cross-Profile Authorization Bypass via Unset Session Profile on Import

Vibe-Trading < 0.1.10 - Path Traversal via Persistent Memory Type