← All credits
Aaron Amran Bin Amiruddin (@aaronamran)
13 vulnerability records and advisories credit this contributor.
CVE-2026-110595
BottleCRM 0.45 through 1.14.5 Memory Exhaustion via Contact and Case CSV Import
CVE-2026-112289
Koalixcrm through 1.14.0 Stored XSS via Task Title in Django Admin
CVE-2026-112290
MI6 @ukic/canary-web-components 3.0.0-canary.12 before 3.0.0-canary.48 DOM XSS via ic-tree-item
CVE-2026-111278
NivoCart through 2.5.1 CAPTCHA Bypass via Answer Disclosed in Page HTML
CVE-2026-111277
NivoCart through 2.5.1 Guest Order Invoice Disclosure via account/order/download
CVE-2026-110594
BottleCRM 0.43 through 1.14.5 ReDoS via Case Routing Rule Regex
CVE-2026-110593
BottleCRM through 1.14.5 Server-Side Template Injection via Account Email create_mail
CVE-2026-110592
BottleCRM 0.30 through 1.14.5 HTML Injection via Custom Invoice PDF Template
CVE-2026-97062
Aureus ERP 1.6.0 Stored XSS via SVG File Upload
CVE-2026-48541
Krayin CRM 2.2.6 Stored Template Injection XSS via Contact Name Field