Skip to content
OpenAdvisories

Vendor

macrozheng

29 known vulnerabilities.

Products

mall 26 mall-swarm 6
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-25858

    macrozheng mall <= 1.0.3 Unauthenticated Password Reset via OTP Disclosure

    macrozheng mall version 1.0.3 and prior contains an authentication vulnerability in the mall-portal password reset workflow that allows an unauthenticated attacker to reset arbitrary user account passwords using only a victim’s telephone number. The password …

    macrozheng mall