ZAST.AI (VulDB User)

Saleor throttling.py get_client_ip excessive authentication

WuzhiCMS Avatar Upload index.php setAvatar unrestricted upload

WuzhiCMS Remote Image Fetch index.php saveRemote server-side request forgery

WuzhiCMS index.php getDataOfJson sql injection

OpenBankProject OBP-API Kryo Redis.scala KryoInjection.invert deserialization

FlowiseAI Flowise Evaluations Endpoint index.ts axios.post server-side request forgery

karakeep-app karakeep OAuth Sign-In auth.ts improper authentication

karakeep-app karakeep Login Endpoint auth.ts authorize excessive authentication

VictoriaMetrics VMAuth Authentication Endpoint main.go requestHandler excessive authentication

mangroup dtale Flask Session Cookie app.py build_secret_key random values