← All credits
Ana10gy (VulDB User)
46 vulnerability records and advisories credit this contributor.
CVE-2026-10550
elunez eladmin Application Deployment App.java command injection
CVE-2026-10241
jeecgboot The server processes these URLs Cloud Instance Metadata Endpoint debug FileDownloadUtils.download2DiskFromNet server-side request forgery
CVE-2026-8320
jishenghua jshERP updatePlatformConfigByKey Endpoint UserService.java getUserByWeixinCode server-side request forgery
CVE-2026-7603
JeecgBoot LoadFile Endpoint FileDownloadUtils.jav checkPathTraversalBatch server-side request forgery
CVE-2026-7605
JeecgBoot uploadImgByHttpEndpoint CommonController.java HttpFileToMultipartFileUtil.downloadImageData server-side request forgery
CVE-2026-7604
JeecgBoot OpenApi Service OpenApiController.java OpenApiController.call server-side request forgery
CVE-2026-7602
JeecgBoot FillRuleUtil edit improper authorization
CVE-2026-6107
1Panel-dev MaxKB ChatHeadersMiddleware chat_headers_middleware.py cross site scripting
CVE-2026-6108
1Panel-dev MaxKB Model Context Protocol Node base_mcp_node.py execute os command injection
CVE-2025-15632
1Panel-dev MaxKB MdPreview chat.ts cross site scripting