Mingsheng Lin

microservices-platform through 6.0.0 Arbitrary Elasticsearch Index Read via search-center

microservices-platform through 6.0.0 Missing Authorization via Disabled URL Permission Checking

microservices-platform through 6.0.0 Arbitrary File Deletion via Missing Ownership Check

novel-plus through 5.3.3 Missing Authorization on the Admin Book Download Endpoint

MoguBlog through 6.2 Missing Authentication on the Comment Email-Notification Endpoint

novel-plus through 5.3.3 Missing Authorization on the Admin /sys/user/list Endpoint

MoguBlog through 6.2 Missing Authorization on the Admin getPictureSortByUid Endpoint

MoguBlog through 6.2 XML External Entity Injection in the Unauthenticated WeChat Callback Endpoint

MoguBlog through 6.2 Missing Authentication for Elasticsearch Index Management Endpoints

MoguBlog through 6.2 Arbitrary Comment Deletion via Request-Body Ownership Check