← All credits

HaiND from the Post and Telecommunication Institute of Technology

246 vulnerability records and advisories credit this contributor.

CVE-2026-108586

1MCP Agent 0.20.0 through 0.39.0 OAuth Tag-Scope Bypass via Negated Tag Filter

CVE-2026-108711

Plastic Labs Honcho through 3.3.0 Incorrect Authorization via POST /v3/workspaces

CVE-2026-108716

mcp-remote 0.8.0 through 0.14.3 Cleartext Credential Transmission via --device-code OAuth Grant

CVE-2026-108721

Open Computer Use through 1.0.0 Denylist Bypass via Case-Variant Bundle ID

CVE-2026-108726

GLPI through 12.0.0 Missing Authorization via ajax/map.php

CVE-2026-108731

Raven 2.0.0 through 3.0.0 Missing Authorization via join_workspace Invite-Only Bypass

CVE-2026-108736

Speedtest Tracker through 1.15.0 IP Allowlist Bypass via X-Forwarded-For Spoofing

CVE-2026-108741

Shepherd through 0.3.1 SSRF via DNS Rebinding in Citation Checker

CVE-2026-108747

Lightdash through 2.556.0 Authorization Bypass via Personal Access Token Deletion

CVE-2026-108752

JupyterHub through 6.0.1 OAuth Client ID Collision via Unescaped Hyphen