← All credits

Mingsheng Lin

47 vulnerability records and advisories credit this contributor.

X-SpringBoot through 6.0 Authentication Bypass via Static Master Code

CVE-2026-100306

TDuck survey form through 6.0 Write Password Bypass via Client-Side Enforcement

CVE-2026-102367

mall4j through 4.0 Insufficient Session Expiration via Token Refresh

CVE-2026-102366

mall4j through 4.0 Unrestricted File Upload in Admin File Endpoints

CVE-2026-102365

mall4j through 4.0 Missing Authorization in Admin User Address Endpoints

CVE-2026-102364

mall4j through 4.0 Improper Authentication Accepts Storefront Tokens on Admin API

CVE-2026-102363

mall4j through 4.0 Unauthenticated Shipment Tracking Disclosure via Order Number

CVE-2026-102362

mall4j through 4.0 Missing Authentication in Product Review Deletion

CVE-2026-102361

mall4j through 4.0 Missing Authentication in Password Update Endpoint

CVE-2026-100303

TDuck survey form through 6.0 Missing Authorization in Form Theme Management Endpoints