yeqifu — Vulnerabilities & Security Advisories 18

Yeqifu operates as a Chinese financial services platform providing online lending and payment solutions. Historically, the platform has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, contributing to its 17 recorded CVEs. Security researchers have identified authentication bypass weaknesses and insecure direct object references in its web applications, potentially exposing sensitive user financial data. While no major public security incidents have been widely documented, the consistent pattern of vulnerabilities suggests ongoing challenges in secure development practices, particularly in input validation and access control mechanisms within its financial service ecosystem.