Skip to content
OpenAdvisories

Vendor

yzcheng90

5 known vulnerabilities.

Products

X-SpringBoot 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-100192

    X-SpringBoot through 6.0 Credential Exposure via Unauthenticated Endpoint

    X-SpringBoot through 6.0 exposes appKey and appSecret credentials in the GET /application/manager/select endpoint without authentication or field filtering. Unauthenticated attackers can retrieve these credentials and use them to send arbitrary SMS messages t…

    yzcheng90 X-SpringBoot
  • Medium 6.3
    CVE-2025-6731

    yzcheng90 X-SpringBoot APK File apk uploadApk path traversal

    A vulnerability was found in yzcheng90 X-SpringBoot up to 5.0 and classified as critical. Affected by this issue is the function uploadApk of the file /sys/oss/upload/apk of the component APK File Handler. The manipulation of the argument File leads to path t…

    yzcheng90 X-SpringBoot