geochen (VulDB User)

Faveo Helpdesk post-ticket-reply Endpoint FormController.php post_ticket_reply missing authentication

elunez eladmin GenConfigController improper authorization

jxxghp MoviePilot Application API improper authorization

ILIAS Learning Management System Learning Progress Tracking class.ilTrQuery.php executeQueries sql injection

Bahmni bahmnicore Search Endpoint sql additionalParams sql injection

IceHRM UserReport Endpoint EmployeeAttendanceReport.php sql injection

tumf mcp-text-editor text_editor.py _validate_file_path path traversal

Harness gitspaces Endpoint list_all.go getAuthorizedSpaces authorization

bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection

Formbricks Survey actions.ts access control