← All credits
George Chen
617 vulnerability records and advisories credit this contributor.
CVE-2026-56773
Teable - Missing Authorization in v2 REST API
CVE-2026-56772
NewsBlur < 14.5.0 - Insecure Direct Object Reference in Social Interactions Endpoint
CVE-2026-56771
NewsBlur < 14.5.0 - Server-Side Request Forgery via add_url Endpoint
CVE-2026-56769
Huly Platform - Server-Side Request Forgery via /import Endpoint
CVE-2026-56767
Maxun < 0.0.42 - Cross-Tenant IDOR in Storage and Webhook API Handlers
CVE-2026-121549
nnn through 5.3 Insecure Temporary File Symlink Overwrite via pdfread and nuke Plugins
CVE-2026-121545
Dreeve before 5.8.0 Missing Authentication in Strava Webhook POST Handler
CVE-2026-121454
Padloc through 4.3.0 Missing SCIM Token Validation via SCIM GET Requests
CVE-2026-121450
CFNext before 3.1.0 Admin Password Recovery via MD5-Derived Subscription UUID
CVE-2026-124029
Kopia through 0.23.1 Path Traversal in Snapshot Restore via Directory Entry Names