← All credits

HaiND from the Post and Telecommunication Institute of Technology

246 vulnerability records and advisories credit this contributor.

CVE-2026-108603

slide-maker through 5.8.0 Path Traversal via generate_images_openai.py

CVE-2026-108597

Cohere Python SDK 5.11.0 through 7.2.0 Path Traversal via SageMaker Tar Extraction

CVE-2026-108592

mini-swe-agent 1.10.0 through 2.4.6 Environment Exposure via BubblewrapEnvironment

CVE-2026-108582

GenOffice through 0.11.505 Insecure Permissions in HTTP MCP Server File Store

CVE-2026-108114

Strapi 5.47.0 through 5.57.0 Improper Authorization via Admin API Token Field Permissions

CVE-2026-108110

MOVO through 0.2.3 Authorization Bypass via Document Endpoints

CVE-2026-108758

Easy!Appointments through 1.6.0 Authorization Bypass via booking/register Endpoint

CVE-2026-108712

SuiteCRM through 7.15.2 and 8.10.2 Missing Authorization via DetailUserRole Entry Point

CVE-2026-108717

Combodo iTop 3.1.0 through 3.3.0 Missing Authorization via LinkSetController

CVE-2026-108722

open-computer-use through commit 610bac8 Stored XSS via log.html Session Log