← All credits
George Chen
617 vulnerability records and advisories credit this contributor.
CVE-2026-58172
Ocelot - IP Allow/Block List Bypass for WebSocket Upgrade Requests
CVE-2026-58167
Nightingale < 9.0.0-beta.2 - Datasource Credential Disclosure to Low-Privilege Users
CVE-2026-58166
OpenBMB ChatDev - Unauthenticated Path Traversal in Upload Handler Allows Arbitrary File Write and Delete
CVE-2026-58165
OpenZiti - Privilege Escalation to Admin via Unauthorized Enrollment Creation
CVE-2026-57960
Hi.Events 1.9.0 - Unauthenticated Attendee PII Exposure via Check-in List short_id
CVE-2026-57957
Papermark 0.22.0 - CORS Misconfiguration in Viewer Upload Endpoint
CVE-2026-57956
SigNoz < 0.133.0 - Cross-Organization Insecure Direct Object Reference in Alert Rules
CVE-2026-57953
Mythic < 3.4.0.60 - Unauthorized Automation Workflow Modification via eventing_import_automatic_webhook Endpoint
CVE-2026-57952
Mythic < 3.4.0.60 - Unauthorized C2 Profile Configuration Access via Unverified Payload UUID
CVE-2026-57951
Mythic < 3.4.0.60 - Broken Permission Filter in payload_build_step Table