Issues

• OneBlog v2.3.9 — Unauthorized Access to WeChat Official Account Sensitive Tokens

  zhangyd-c/OneBlog#43 · Filter by author Passwords404 opened on Apr 30, 2026

• Unrestricted File Upload Vulnerability in File Upload API

  zhangyd-c/OneBlog#42 · Filter by author kingkingkingson opened on Jan 22, 2026

• 在RestCommentController的edit接口疑似存在水平越权，导致跨用户修改

  zhangyd-c/OneBlog#41 · Filter by author kingkingkingson opened on Jan 22, 2026

• 在RestApiController的autoLink接口中是否疑似存在权限不足漏洞

  zhangyd-c/OneBlog#40 · Filter by author kingkingkingson opened on Jan 22, 2026

• 在RenderController的updateLog方法中疑似存在水平越权漏洞

  zhangyd-c/OneBlog#39 · Filter by author kingkingkingson opened on Jan 22, 2026

• 后台管理加载速度慢

  zhangyd-c/OneBlog#38 · Filter by author RoninYz opened on Nov 4, 2025

• There is a ssrf vulnerability here 2.3.6 / 2.3.9

  zhangyd-c/OneBlog#36 · Filter by author hacker-wp opened on Mar 16, 2025

• There is a denial of service vulnerability affecting the latest version 2.3.9

  zhangyd-c/OneBlog#35 · Filter by author hacker-wp opened on Mar 12, 2025

• There is a Insecure Permissions vulnerability exists in OneBlog <= 2.2.8

  zhangyd-c/OneBlog#29 · Filter by author afeng2016-s opened on Dec 29, 2021

• There is a stored xss vulnerability exists in OneBlog- <=2.2.8

  zhangyd-c/OneBlog#27 · Filter by author Vulnerability110 opened on Dec 28, 2021

• 关于项目存在FreeMarker模板注入实现远程命令执行问题

  zhangyd-c/OneBlog#26 · Filter by author Firebasky opened on Nov 8, 2021

• Redis连接失败

  zhangyd-c/OneBlog#20 · Filter by author dlpuzcl opened on Oct 29, 2019

• 请问freemarker用在哪些地方呢

  zhangyd-c/OneBlog#13 · Filter by author superwei629 opened on Jun 30, 2019