hieuPenguinnn

Elio through 1.13.0 Insecure Temporary File Creation in External Preview Command Capture

rovr through 0.10.3 OS Command Injection via Unquoted Path to cmd.exe

Fossify File Manager through 1.6.2 Zip Slip Path Traversal via DecompressActivity

muCommander through 1.6.2 Path Traversal via Archive Extraction to FTP/SFTP

wallabag 2.6.13 through 2.6.14 Stored XSS via Failed HTML Import Upload

Kavita 0.9.0 through 0.9.1.4 SSRF Blocklist Bypass via upload-cbl-file Endpoint

Razorpay IFSC Ruby gem through 2.0.62 SSRF via IFSC lookup

Kubeflow Model Registry through 0.3.17 SSRF via InferenceService Controller URL Annotation

vhr through commit 03abbd3 Information Disclosure of Operator Password Hashes via GET /chat/hrs

youlai-boot through 2.21.1 Missing Authorization in User Status Update Endpoint