← All credits
George Chen
618 vulnerability records and advisories credit this contributor.
CVE-2026-70561
TestLink 1.9.20 and prior Authenticated IDOR via attachmentdownload.php
CVE-2026-65319
Feedbin Unauthenticated Entry Content Disclosure via GET /api/v2/entries/:id/text
CVE-2026-65318
Verba (goldenverba) Unauthenticated Server-Side Request Forgery via WebSocket Import Endpoint HTMLReader
CVE-2026-65317
Verba (goldenverba) Server-Side Request Forgery via /api/connect and Same-Origin Middleware Bypass
CVE-2026-65316
xxl-job Cross-Job-Group Log Disclosure via Missing Authorization Check in /joblog/logDetailCat
CVE-2026-65057
Keep Unauthenticated Server-Side Request Forgery via POST /providers/healthcheck
CVE-2026-65056
mcp-webresearch Server-Side Request Forgery in visit_page Due to Missing Internal-IP Filtering
CVE-2026-61463
Shiori Authenticated Privilege Escalation via PATCH /api/v1/auth/account
CVE-2026-59713
Leantime - OIDC Login CSRF via Unconditional State Verification Stub
CVE-2026-59709
Ghostfolio - Unauthorized Portfolio Holding Tag Modification via Missing Permission Check