Retired CTFer · Security Researcher
- Blog: https://le1a.github.io/
- GitHub: https://github.com/Le1a
- Feb 2026 – Present: JD.com — Security Engineer
- May 2023 – Jan 2026: ThreatBook — Security Researcher
| CVE | Product | Type |
|---|---|---|
| CVE-2023-34747 | UJCMS | File Upload |
| CVE-2024-45627 | Apache Linkis | File Read |
| CVE-2025-25347 | QingLong Panel | RCE |
| CVE-2025-28044 | ECShop | RCE |
| CVE-2025-48999 | DataEase | RCE |
| CVE-2025-49001 | DataEase | Auth Bypass |
| CVE-2025-49002 | DataEase | RCE |
| CVE-2025-6507 | h2o-3 | File Read & RCE |
| CVE-2025-6544 | h2o-3 | File Read & RCE |
| CVE-2025-53004 | DataEase | RCE |
| CVE-2025-53005 | DataEase | RCE |
| CVE-2025-57773 | DataEase | File Write |
| CVE-2025-29847 | Apache Linkis | File Read |