← All credits

HaiND from the Post and Telecommunication Institute of Technology

246 vulnerability records and advisories credit this contributor.

CVE-2026-108732

Frappe HR (hrms) before 16.11.0 Missing Authorization via get_account_and_amount

CVE-2026-108737

Traccar through 6.16.0 Weak Password Recovery via TokenManager Token Purpose Confusion

CVE-2026-108742

CloudBeaver through 25.3.5 Missing Authorization via initConnection GraphQL Mutation

CVE-2026-108748

Quarkus LangChain4j 1.9.0 through 1.14.1 Memory Exhaustion via /_chat/routes WebSocket

CVE-2026-108753

Agnaistic agnai through 1.0.555 Hard-Coded Credentials in self-host Docker Compose

CVE-2026-108727

EdgeEver through 1.108.0 Missing Authorization via Memo-Template API Routes

CVE-2026-108580

AniWorld Downloader before 5.3.0 WebUI Login Brute Force via /login

CVE-2026-108595

Phi 0.3.0 through 0.28.4 Permission Bypass via agent_spawn Workdir

CVE-2026-108600

open-multi-agent 1.5.0 through 1.21.2 Sandbox Escape via file_write Dangling Symlink

CVE-2026-108546

Spotweb through 1.5.8 OS Command Injection via Spot Title in Runcommand Integration