Ghufran Khan (VulDB User)

BookStackApp BookStack Chapter Export ExportFormatter.php chapterToMarkdown access control

hcengineering Huly Platform JWT Token token.ts hard-coded key

hcengineering Huly Platform Import Endpoint index.ts server-side request forgery

Casdoor Webhook URL server-side request forgery

chatwoot Webhook API trigger.rb Trigger server-side request forgery

Casdoor dangerouslySetInnerHTML cross site scripting

Casdoor OAuth Authorization Request redirect

mickasmt next-saas-stripe-starter Stripe API open-customer-portal.ts openCustomerPortal authorization

mickasmt next-saas-stripe-starter Checkout generate-user-stripe.ts generateUserStripe logic error

mickasmt next-saas-stripe-starter update-user-role.ts updateUserrole improper authorization