zhenfeng13 records

13 published records for vendor zhenfeng13.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

13 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
22Monitor	CVE-2025-9100No exploit	zhenfeng13 My-Blog Frontend Blog Article Comment comment authentication replayzhenfeng13 · my-blog · CWE-287 Pre-auth Auth bypass	Medium5.5	—	0.5%	Aug 17, 2025
21Monitor	CVE-2025-3593No exploit	ZHENFENG13/code-projects My-Blog-layui authorImg upload unrestricted uploadzhenfeng13 · my-blog-layui · CWE-284 File upload Broken access control (IDOR)	Medium5.3	—	0.5%	Apr 14, 2025
21Monitor	CVE-2025-3807No exploit	zhenfeng13 My-BBS Endpoint UploadController.java upload unrestricted uploadzhenfeng13 · my-bbs · CWE-284 File upload Broken access control (IDOR)	Medium5.3	—	0.5%	Apr 19, 2025
21Monitor	CVE-2024-13144No exploit	zhenfeng13 My-Blog BlogController.java uploadFileByEditomd unrestricted uploadzhenfeng13 · my-blog · CWE-284 File upload Broken access control (IDOR)	Medium5.3	—	0.4%	Jan 5, 2025
21Monitor	CVE-2024-13145No exploit	zhenfeng13 My-Blog uploadController. java upload unrestricted uploadzhenfeng13 · my-blog · CWE-284 File upload Broken access control (IDOR)	Medium5.3	—	0.4%	Jan 5, 2025
21Monitor	CVE-2023-29636No exploit	Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML via the "title" fielzhenfeng13 · my blog · CWE-79 XSS	Medium5.4	—	0.4%	May 1, 2023
21Monitor	CVE-2023-29639No exploit	Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML via editing an articzhenfeng13 · my blog · CWE-79 XSS	Medium5.4	—	0.3%	May 1, 2023
21Monitor	CVE-2025-3808No exploit	zhenfeng13 My-BBS cross-site request forgeryzhenfeng13 · my-bbs · CWE-352 Pre-auth CSRF	Medium5.3	—	0.3%	Apr 19, 2025
20Monitor	CVE-2025-3591No exploit	ZHENFENG13/code-projects My-Blog-layui edit cross site scriptingzhenfeng13 · my-blog-layui · CWE-79 XSS	Medium5.1	—	0.4%	Apr 14, 2025
20Monitor	CVE-2025-3592No exploit	ZHENFENG13/code-projects My-Blog-layui edit cross site scriptingzhenfeng13 · my-blog-layui · CWE-79 XSS	Medium5.1	—	0.4%	Apr 14, 2025
8Monitor	CVE-2025-9101No exploit	zhenfeng13 My-Blog Tag save cross site scriptingzhenfeng13 · my-blog · CWE-79 XSS	Low2.0	—	0.2%	Aug 17, 2025
8Monitor	CVE-2025-8739No exploit	zhenfeng13 My-Blog save cross-site request forgeryzhenfeng13 · my-blog · CWE-352 Pre-auth CSRF	Low2.1	—	0.2%	Aug 8, 2025
7Monitor	CVE-2025-8740No exploit	zhenfeng13 My-Blog Category save cross site scriptingzhenfeng13 · my-blog · CWE-79 XSS	Low1.9	—	0.2%	Aug 8, 2025

CVE-2025-9100
22Monitor
zhenfeng13 My-Blog Frontend Blog Article Comment comment authentication replay
MediumCVSS 5.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
zhenfeng13 · my-blogAug 17, 2025
CVE-2025-3593
21Monitor
ZHENFENG13/code-projects My-Blog-layui authorImg upload unrestricted upload
MediumCVSS 5.3No exploitEPSS 0%
- File upload
- Broken access control (IDOR)
zhenfeng13 · my-blog-layuiApr 14, 2025
CVE-2025-3807
21Monitor
zhenfeng13 My-BBS Endpoint UploadController.java upload unrestricted upload
MediumCVSS 5.3No exploitEPSS 0%
- File upload
- Broken access control (IDOR)
zhenfeng13 · my-bbsApr 19, 2025
CVE-2024-13144
21Monitor
zhenfeng13 My-Blog BlogController.java uploadFileByEditomd unrestricted upload
MediumCVSS 5.3No exploitEPSS 0%
- File upload
- Broken access control (IDOR)
zhenfeng13 · my-blogJan 5, 2025
CVE-2024-13145
21Monitor
zhenfeng13 My-Blog uploadController. java upload unrestricted upload
MediumCVSS 5.3No exploitEPSS 0%
- File upload
- Broken access control (IDOR)
zhenfeng13 · my-blogJan 5, 2025
CVE-2023-29636
21Monitor
Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML via the "title" fiel
MediumCVSS 5.4No exploitEPSS 0%
- XSS
zhenfeng13 · my blogMay 1, 2023
CVE-2023-29639
21Monitor
Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML via editing an artic
MediumCVSS 5.4No exploitEPSS 0%
- XSS
zhenfeng13 · my blogMay 1, 2023
CVE-2025-3808
21Monitor
zhenfeng13 My-BBS cross-site request forgery
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- CSRF
zhenfeng13 · my-bbsApr 19, 2025
CVE-2025-3591
20Monitor
ZHENFENG13/code-projects My-Blog-layui edit cross site scripting
MediumCVSS 5.1No exploitEPSS 0%
- XSS
zhenfeng13 · my-blog-layuiApr 14, 2025
CVE-2025-3592
20Monitor
ZHENFENG13/code-projects My-Blog-layui edit cross site scripting
MediumCVSS 5.1No exploitEPSS 0%
- XSS
zhenfeng13 · my-blog-layuiApr 14, 2025
CVE-2025-9101
8Monitor
zhenfeng13 My-Blog Tag save cross site scripting
LowCVSS 2.0No exploitEPSS 0%
- XSS
zhenfeng13 · my-blogAug 17, 2025
CVE-2025-8739
8Monitor
zhenfeng13 My-Blog save cross-site request forgery
LowCVSS 2.1No exploitEPSS 0%
- Pre-auth
- CSRF
zhenfeng13 · my-blogAug 8, 2025
CVE-2025-8740
7Monitor
zhenfeng13 My-Blog Category save cross site scripting
LowCVSS 1.9No exploitEPSS 0%
- XSS
zhenfeng13 · my-blogAug 8, 2025