← All credits
George Chen
617 vulnerability records and advisories credit this contributor.
CVE-2026-58467
Cockpit CMS 2.14.0 - Path Traversal Local File Inclusion via index.php
CVE-2026-58449
txtai - Unauthenticated Remote Code Execution via Unsafe Reflection in API /reindex function Parameter
CVE-2026-58000
luci-proto-openvpn - Command Injection via cl_meta Parameter in generateKey
CVE-2026-57959
Hi.Events 1.9.0 - Promo Code Max-Usage Bypass via Asynchronous Job Race Condition
CVE-2026-57955
SigNoz 0.130.1 - SQL Injection in Alert History Endpoints via Rule ID Parameter
CVE-2026-57950
ruoyi-vue-pro - Incorrect Permission Namespace in ErpSaleOrderController
CVE-2026-57949
ruoyi-vue-pro - Missing Authorization in CRM Follow-up Record GET Endpoint
CVE-2026-57948
Pinpoint - Insecure Session Cookie Attributes in pinpointJwt
CVE-2026-57947
Pinpoint - Server-Side Request Forgery via Alarm Webhook Registration
CVE-2026-56768
Seahub < 13.0.23 - Authentication Bypass in ShareLinkZipTaskView GET Method