Results
33,533 of 90,429· Page 102/671JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartPermissionController delete handl
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysDepartPermissionController that allows any
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule handler of SysDepartPermissio
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the loadDatarule handler of SysRoleController
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController queryById handler tha
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController deleteBatch handler t
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController delete handler that allow
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController edit handler that al
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController deleteBatch handler
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController deleteBatch handler
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController delete handler that
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController exportXls handler t
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController release handler that al
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController deleteBatch han
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delete handler
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController edit handler th
JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to re
JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to de
JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to de
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController deleteById handler that al
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController updateById handler that al
Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions.
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Produc
Unauthenticated Content Injection in Boutique <= 2.3.3 versions.
Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions.
Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup <= 1.4.0 versions.
Subscriber Broken Access Control in Jetpack VideoPress <= 3.6 versions.
Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP run_query safety gate that allows
Helicone through v2025.08.21-1 contains a server-side request forgery vulnerability in the Jawn webhook sender that allo
Subscriber Bypass Vulnerability in MicroPayments <= 3.2.9 versions.
Unauthenticated Bypass Vulnerability in Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway <= 1.7.2 vers
Missing Authorization vulnerability in VillaTheme ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce woo-
Improper Verification of Source of a Communication Channel vulnerability in CodePeople2 Sell Downloads sell-downloads al
open-multi-agent (@open-multi-agent/core) 1.5.0 through 1.21.2 contains a link following vulnerability in the file_write
phi 0.1.1 through 0.28.4 contains an improper link resolution vulnerability that allows malicious repositories to bypass
Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal (tar slip) vulnerability in _s3_models_dir_to_tarfile t
OpenLIT 2.1.0 contains an authorization bypass vulnerability that allows authenticated users to read other projects' tel
Phi 0.3.0 through 0.28.4 contains a permission bypass vulnerability that allows spawned sub-agents to escape workspace_o
9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings
mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwra
InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with files_create
1MCP Agent (@1mcp/agent) 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows authenticat
argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool tha
zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach int
GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows
TencentCloud Octop through 1.0.2b6 contains a missing authorization vulnerability that allows authenticated low-privileg
Test your stack for 2026issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.