Search results

OneBlog v2.3.9 — Unauthorized Access to WeChat Official Account Sensitive Tokens

Status: Open.

#43 In zhangyd-c/OneBlog;

· Passwords404 opened on Apr 30, 2026

Unrestricted File Upload Vulnerability in File Upload API

Status: Open.

#42 In zhangyd-c/OneBlog;

· kingkingkingson opened on Jan 22, 2026

在RestCommentController的edit接口疑似存在水平越权，导致跨用户修改

Status: Open.

#41 In zhangyd-c/OneBlog;

· kingkingkingson opened on Jan 22, 2026

在RestApiController的autoLink接口中是否疑似存在权限不足漏洞

Status: Open.

#40 In zhangyd-c/OneBlog;

· kingkingkingson opened on Jan 22, 2026

在RenderController的updateLog方法中疑似存在水平越权漏洞

Status: Open.

#39 In zhangyd-c/OneBlog;

· kingkingkingson opened on Jan 22, 2026

后台管理加载速度慢

Status: Open.

#38 In zhangyd-c/OneBlog;

· RoninYz opened on Nov 4, 2025

There is a ssrf vulnerability here 2.3.6 / 2.3.9

Status: Open.

#36 In zhangyd-c/OneBlog;

· hacker-wp opened on Mar 16, 2025

There is a denial of service vulnerability affecting the latest version 2.3.9

Status: Open.

#35 In zhangyd-c/OneBlog;

· hacker-wp opened on Mar 12, 2025

There is a Insecure Permissions vulnerability exists in OneBlog <= 2.2.8

Status: Open.

#29 In zhangyd-c/OneBlog;

· afeng2016-s opened on Dec 29, 2021

There is a stored xss vulnerability exists in OneBlog- <=2.2.8

Status: Open.

#27 In zhangyd-c/OneBlog;

· Vulnerability110 opened on Dec 28, 2021

关于项目存在FreeMarker模板注入实现远程命令执行问题

Status: Open.

#26 In zhangyd-c/OneBlog;

· Firebasky opened on Nov 8, 2021

Redis连接失败

Status: Open.

#20 In zhangyd-c/OneBlog;

· dlpuzcl opened on Oct 29, 2019