PT-2025-12270

Name of the Vulnerable Software and Affected Versions gaizhenbiao/chuanhuchatgpt version git c91dbfc Description An incorrect authorization issue exists, allowing any user to restart the server at will. This leads to a complete loss of availability due to the function responsible for restarting t...

CVE-2021-45785: Cross-Site Request Forgery (CSRF)

TruDesk Help Desk/Ticketing Solution v1.1.11 is vulnerable to a Cross-Site Request Forgery CSRF attack which would allow an attacker to restart the server, causing a DoS attack. The attacker must craft a webpage that would perform a GET request to the /api/v1/admin/restart endpoint, then the vict...