← All credits

alham-rizvi

51 vulnerability records and advisories credit this contributor.

SiYuan before v3.7.4 Missing Authorization via block API

SiYuan before 3.7.4 Cross-Site Request Forgery via CheckAuth

SiYuan kernel Path Traversal via database_clean MCP tool

SiYuan before v3.7.4 Incorrect Authorization via Publish Access

SiYuan before 3.7.4 Brute-Force via authFilePublishAccess

SiYuan kernel before 3.7.4 Unthrottled Brute-Force via API Token

SiYuan before v3.7.4 Authentication Bypass via HTTP Basic Auth

SiYuan before v3.7.4 Stored XSS via assets endpoint

SiYuan before 3.7.4 Local Privilege Escalation via elevator.exe

SiYuan before 3.7.4 Unauthenticated Debug Endpoint Information Disclosure