Skip to content
OpenAdvisories

Vendor

LiuYuYang01

2 known vulnerabilities.

Products

ThriveX-Blog 1 ThriveX-Server 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-110131

    ThriveX-Server through 4.0 Missing Authorization via Article Retrieval Endpoints

    ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/{id} endpoints that allows unauthenticated attackers to read unpublished draft and soft-deleted articles. Attackers can request sequential artic…

    LiuYuYang01 ThriveX-Server
  • Medium 6.3
    CVE-2025-9151

    LiuYuYang01 ThriveX-Blog web updateJsonValueByName improper authorization

    A security flaw has been discovered in LiuYuYang01 ThriveX-Blog up to 3.1.7. Affected by this vulnerability is the function updateJsonValueByName of the file /web_config/json/name/web. Performing manipulation results in improper authorization. It is possible …

    LiuYuYang01 ThriveX-Blog