Mingsheng Lin

mall4j through 4.0 Missing Authorization in Admin User Address Endpoints

mall4j through 4.0 Missing Authentication in Password Update Endpoint

X-SpringBoot through 6.0 Authentication Bypass via Static Master Code

TDuck survey form through 6.0 Write Password Bypass via Client-Side Enforcement

TDuck survey form through 6.0 Missing Authorization in Form Theme Management Endpoints

Apache DolphinScheduler: Unauthorized Disclosure of Data Source Information via /datasources/unauth-datasource

X-SpringBoot through 6.0 Credential Exposure via Unauthenticated Endpoint

X-SpringBoot through 6.0 Authorization Bypass via User Management

TDuck survey form 6.0 Information Disclosure via Fail-Open Form Ownership Check

mall4j through 4.0 Unauthenticated Shipment Tracking Disclosure via Order Number