hieuPenguinnn

UnicomAI Wanwu through 0.6.5 Authorization Bypass via /v1/appspace/app/key AppKey Minting

phpMyFAQ through 4.1.10 Missing Authorization via MCP Server faq_search Tool

CoreShop through 2026.2.2 Missing Authorization via ResourceController listAction

CoreShop through 1.5.5 Authorization Bypass via OrderController OrderConfirm and SendReship

AmoyLab Unla through 0.10.0 OAuth2 Authentication Bypass via /authorize

iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resume Endpoint

BotSharp through 5.2.0 Authentication Bypass via Hard-Coded JWT Signing Key

mcp-go through 1.2.1 Denial of Service via Unbounded POST Body Buffering

UnicomAI Wanwu through 0.6.5 Missing Authorization via DELETE /v1/appspace/app/publish

Wanwu before 0.6.3 IDOR AppKey Deletion via DELETE /v1/appspace/app/key