manus-use

AVideo through 29.0 Cross-User Category Asset Deletion via Missing Ownership Check

SiYuan before v3.8.2 Path Traversal via removeRiffDeck

AVideo through 29.0 Information Disclosure via stats.json.php

Network-AI SandboxPolicy before 5.15.1 Blocklist Bypass via Quote Mismatch

Network-AI ClaudeHookBridge Deny Pattern Bypass via Truncation

ArcadeDB before 26.8.1 Permission Bypass via DEFINE FUNCTION

ArcadeDB Gremlin Wire Protocol Authorization Bypass Cross-Database

ArcadeDB before 26.8.1 Per-Type ACL Bypass via Batch Handlers

ArcadeDB before 26.8.1 Unauthorized Function Deletion via DELETE FUNCTION

ArcadeDB before 26.8.1 Arbitrary File Read via LOAD CSV