← All credits

HaiND from the Post and Telecommunication Institute of Technology

246 vulnerability records and advisories credit this contributor.

CVE-2026-108760

LlamaFarm through 0.0.34 Unauthenticated API Exposed on All Interfaces

CVE-2026-108755

Hatchet through 0.110.5 Unauthenticated Memory Exhaustion via SNS Ingestion Endpoint

CVE-2026-110604

Mini-XML 4.0.0 through 4.0.6 Stack Out-of-Bounds Write via mxml_strtod()

CVE-2026-110599

L-SMASH through 2.14.5 Double Free in HEVC and H.264 Importer Probe

CVE-2026-108112

ruoyi-ai 3.0.0 through 3.1.0 Missing Authorization via Workflow Delete Endpoint

CVE-2026-108158

plugNmeet Server through 2.5.2 Path Traversal via /api/whiteboard/convert

CVE-2026-108545

SillyTavern 1.12.13 through 1.19.0 Pre-Authentication Denial of Service via Body Parsing

CVE-2026-108579

OpenPanel through 2.3.0 CSV Formula Injection via Cohort Member Export

CVE-2026-108585

argocd-mcp through 0.9.0 Path Traversal via delete_application Tool

CVE-2026-108594

Mealie 3.26.0 through 3.28.0 SSRF via OIDC Picture Claim Avatar Fetch