hieuPenguinnn

AmoyLab Unla through 0.10.0 OAuth2 Authentication Bypass via /authorize

iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resume Endpoint

Katanemo Plano through 0.4.37 Missing Authentication on Envoy Admin Interface

APIPark through 1.9.7-beta IDOR via application authorization endpoints

Odoo MCP 1.0.0 through 1.3.2 Information Disclosure via execute_method Tool

BotSharp through 5.2.0 Authentication Bypass via Hard-Coded JWT Signing Key

mcp-go through 1.2.1 Denial of Service via Unbounded POST Body Buffering

Predibase LoRAX through 0.12.1 API Token Exposure via Router Logs

Hugging Face Text Embeddings Inference through 1.9.4 Cleartext API Key Logging

UnicomAI Wanwu through 0.6.5 Authorization Bypass via /v1/appspace/app/key AppKey Minting