← All credits
George Chen
617 vulnerability records and advisories credit this contributor.
CVE-2026-121547
dysk before 3.8.2 Terminal Escape Sequence Injection via Mount Metadata
CVE-2026-121551
PostfixAdmin through 4.0.5 Stored XSS via TOTP Exception Description
CVE-2026-121453
SQLBot through 1.10.3 Path Traversal via datasource importToDb Endpoint
CVE-2026-121544
Koodo Reader through 2.4.6 Path Traversal via OPDS Cover and Download Handlers
CVE-2026-121548
nnn through 5.3 OS Command Injection via togglex Plugin
CVE-2026-121552
domain-admin before 1.6.79 Missing Authorization via getGroupUserList
CVE-2026-92809
PrestaShop psgdpr through 1.4.3 GDPR Log Forgery
CVE-2026-118682
ClashMi through 1.0.32.1801 Disabled TLS Certificate Validation Enables Update MITM
CVE-2026-116485
danmu_api before 1.21.7 Authentication Bypass via Default Token in Env Endpoints
CVE-2026-119705
SerpBear before 3.1.1 Missing Authentication via POST /api/notify