← All credits

HaiND from the Post and Telecommunication Institute of Technology

246 vulnerability records and advisories credit this contributor.

CVE-2026-112276

Netpbm through 11.16.00 Heap Out-of-Bounds Read via rasttopnm Colormap

CVE-2026-112271

libdisplay-info through 0.4.0 Heap Out-of-Bounds Read via DisplayID v1 Parser

CVE-2026-111677

Antiword through 0.37 Heap Out-of-Bounds Read via vGet8LstInfo in prop8.c

CVE-2026-112009

smpeg through 2.0.0 Heap Out-of-Bounds Read via MPEGsystem::FillBuffer

CVE-2026-112010

smpeg through 2.0.0 Integer Underflow via stream_header in MPEGsystem.cpp

CVE-2026-108165

Immich through 3.3.1 Missing Authorization in Partner Sync Exposes Locked Folder Metadata

CVE-2026-108581

Octop through 1.0.2b6 Missing Authorization Exposes Provider API Keys via /api/providers

CVE-2026-108591

InnoShop 0.9.2 Local File Disclosure via AI Core MCP file_upload Tool

CVE-2026-108596

OpenLIT 2.1.0 Authorization Bypass via x-openlit-project-id Header

CVE-2026-108602

Helicone through v2025.08.21-1 SSRF via Jawn Webhook Sender DNS Resolution