← All credits

alham-rizvi

51 vulnerability records and advisories credit this contributor.

SiYuan kernel Path Traversal via database_clean MCP tool

SiYuan before v3.7.4 Incorrect Authorization via Publish Access

SiYuan before v3.7.4 XSS-to-RCE via malicious filename upload

Grav before 2.0.15 Path Traversal via plugin-asset-map.php

SiYuan before 3.7.4 Brute-Force via authFilePublishAccess

SiYuan kernel before 3.7.4 Unthrottled Brute-Force via API Token

SiYuan before v3.7.4 Authentication Bypass via HTTP Basic Auth

SiYuan before v3.7.4 Stored XSS via assets endpoint

SiYuan before 3.7.4 Local Privilege Escalation via elevator.exe

SiYuan before 3.7.4 Unauthenticated Debug Endpoint Information Disclosure