Issues

• Unrestricted File Upload (CWE-434) with Predictable Filename Generation (CWE-330) in NewBeeAdminUploadAPI

  newbee-ltd/newbee-mall#132 · Filter by author mming-liu opened on Oct 26, 2026

• [Feature Request] Support Docker and Docker Compose for easy deployment / 支持 Docker 容器化一键部署

  newbee-ltd/newbee-mall#128 · Filter by author 1928704-afk opened on Oct 14, 2026

• Negative Cart Quantity Offsets the Order Total and Inflates the Stock Counter

  newbee-ltd/newbee-mall#127 · Filter by author czTangt opened on Sep 16, 2026

• [Sercuity]新蜂商城（newbee-mall）后台文件上传无后缀白名单，结合图片/HTML多型文件绕过BufferedImage校验，导致存储型XSS。

  newbee-ltd/newbee-mall#126 · Filter by author rockmelodies opened on Aug 26, 2026

• [Security]新蜂商城（newbee-mall）POST /admin/profile/name 缺乏 CSRF 防护，可跨站强制重命名管理员登录用户名，导致管理员被永久锁定

  newbee-ltd/newbee-mall#125 · Filter by author rockmelodies opened on Aug 26, 2026

• [Security]新蜂商城（newbee-mall） GET /admin/logout 接口缺少 CSRF 防护，可被诱导触发强制登出。

  newbee-ltd/newbee-mall#124 · Filter by author rockmelodies opened on Aug 26, 2026

• [Security] Stored XSS in Rich Text Content on the Traditional Product Detail Page

  newbee-ltd/newbee-mall#122 · Filter by author insung186 opened on Jul 5, 2026

• [Security] Stored XSS in Product Detail Rich Text Content

  newbee-ltd/newbee-mall#121 · Filter by author insung186 opened on Jul 5, 2026

• [Security] Unauthenticated Order Payment Status Manipulation via /paySuccess

  newbee-ltd/newbee-mall#120 · Filter by author geo-chen opened on Jun 3, 2026
  6

• Default admin credentials + weak MD5 password hashing enable full admin compromise and credential cracking

  newbee-ltd/newbee-mall#119 · Filter by author 13ernkastel opened on Feb 12, 2026

• Experimenting with a.i.

  newbee-ltd/newbee-mall#118 · Filter by author Duvalkidd01 opened on Feb 11, 2026

• Logical Vulnerability

  newbee-ltd/newbee-mall#117 · Filter by author wrndmzmnq opened on Feb 10, 2026
  1

• File Upload Vulnerability

  newbee-ltd/newbee-mall#116 · Filter by author wrndmzmnq opened on Feb 10, 2026

• CSRF Vulnerability in Admin Carousel Management

  newbee-ltd/newbee-mall#115 · Filter by author flashzyc opened on Feb 5, 2026

• CSRF Vulnerability in Personal Information Update

  newbee-ltd/newbee-mall#114 · Filter by author flashzyc opened on Feb 5, 2026

• CSRF Vulnerability in Payment Processing

  newbee-ltd/newbee-mall#113 · Filter by author flashzyc opened on Feb 5, 2026

• CSRF Vulnerability in Shopping Cart Item Deletion

  newbee-ltd/newbee-mall#112 · Filter by author flashzyc opened on Feb 5, 2026

• CSRF Vulnerability in Shopping Cart Item Update

  newbee-ltd/newbee-mall#111 · Filter by author flashzyc opened on Feb 5, 2026

• CSRF Vulnerability in Shopping Cart Item Addition

  newbee-ltd/newbee-mall#110 · Filter by author flashzyc opened on Feb 5, 2026

• CSRF Vulnerability in Order Completion

  newbee-ltd/newbee-mall#109 · Filter by author flashzyc opened on Feb 5, 2026

• CSRF Vulnerability in Order Cancellation

  newbee-ltd/newbee-mall#108 · Filter by author flashzyc opened on Feb 5, 2026

• CSRF Vulnerability in Order Creation (Critical Design Flaw)

  newbee-ltd/newbee-mall#107 · Filter by author flashzyc opened on Feb 5, 2026

• CSRF Vulnerability in Admin Profile Name Update

  newbee-ltd/newbee-mall#106 · Filter by author flashzyc opened on Feb 5, 2026

• Critical Payment Vulnerability (IDOR) in /paySuccess of newbee-mall

  newbee-ltd/newbee-mall#100 · Filter by author ez-lbz opened on Sep 3, 2025
  1

• 关于秒杀业务逻辑的两个问题

  newbee-ltd/newbee-mall#97 · Filter by author zzy-plus opened on Apr 7, 2025