George Chen

Weights & Biases wandb before 0.29.0 Path Traversal via File Download

Strapi 4.x through 4.26.2 and 5.x before 5.48.1 Stored XSS via WYSIWYG

LightGBM through 4.7.0 Out-of-Bounds Write via Crafted Model

Harbor through 2.15.2 Scanner Credential Disclosure via Query Parameter

Harness through 3.3.0 Missing Access Control via infraproviders endpoint

Nuclei from 3.7.0 before 3.11.1 Template Signature Bypass via Modification-Time-Only Cache

Chroma through 1.5.9 Authorization Bypass via Collection Identifier

BC Security Empire before 6.7.1 Path Traversal File Upload RCE

Coze Studio through 0.5.1 Server-Side Request Forgery via Plugin

Higress before 2.2.4 Rate Limit Bypass via Malformed Cookie Header