Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

dataCycle-CORE — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in dataCycle-CORE, with AI-generated Chinese analysis, references, and POCs.

Vendor: datacycle-engine

CVE IDTitleCVSSSeverityPublished
CVE-2026-32825 dataCycle No Brute-Force Protection On Web And API Login Endpoints CWE-307 7.3 High2026-07-20
CVE-2026-32824 dataCycle User API Password Reset And Confirmation Flows Trust Attacker- Controlled Redirect Targets CWE-601 7.3 High2026-07-20
CVE-2026-32823 dataCycle State-Changing GET Endpoints Enable CSRF CWE-352 4.3 Medium2026-07-20
CVE-2026-32821 API Collection Impersonation Via user_email And Missing Object- Level Authorization CWE-285 8.1 High2026-07-20
CVE-2026-32806 dataCycle Authorization Bypass Via /remote_render CWE-285 7.5 High2026-07-20
CVE-2026-32820 dataCycle Public Markdown Path Traversal Via /docs/*path CWE-22 7.5 High2026-07-20
CVE-2026-32819 dataCycle User Directory Enumeration Via /users/search CWE-285 4.3 Medium2026-07-20
CVE-2026-32822 dataCycle Unauthenticated Reflected DOM XSS Via flash[...] On Public Pages CWE-80 6.1 Medium2026-07-20
CVE-2026-32807 dataCycle Public DataLink Text File Download Ignores Validity And Authorization CWE-285 7.5 High2026-07-20

All 9 known CVE vulnerabilities affecting dataCycle-CORE with full Chinese analysis, references, and POCs where available.