← All credits
CyberKareem
28 vulnerability records and advisories credit this contributor.
CVE-2026-105191
WP ERP < 1.17.11 - Subscriber+ Sensitive Data Disclosure via Audit Log
CVE-2026-114079
Trigger.dev before 4.5.6 Cross-Environment Deployment Cancel via Cancel Endpoint
CVE-2026-114076
Trigger.dev before 4.5.2 Blind SSRF via Alert Channel Webhook URL
CVE-2026-114078
Trigger.dev before 4.5.6 Cross-Organization Schedule Deletion via Unscoped friendlyId Lookup
CVE-2026-85615
Openpanel before 2.3.0 Cross-Tenant IDOR via report.getLayouts
CVE-2026-85614
OpenPanel API before 2.3.0 Unauthenticated SSRF via site-checker
CVE-2026-85613
OpenPanel before 2.3.0 Unauthenticated XSS via SVG Favicon Proxy
CVE-2026-114077
Trigger.dev before 4.5.6 Cross-Tenant Deployment Hijack via createDeploymentBackgroundWorkerV4
CVE-2026-108073
SureCart < 4.9.5 - Unauthenticated Private Catalog Data Disclosure via 'expand' Parameter
CVE-2026-97219
MStore API 4.21.1 - 4.22.0 - Subscriber+ Payment Bypass via 'status' Parameter