← All credits

HaiND from the Post and Telecommunication Institute of Technology

246 vulnerability records and advisories credit this contributor.

CVE-2026-108757

Nexting pinclaw through 0.3.0 Missing Authentication via POST /pinclaw/send

CVE-2026-108756

Abilityai Trinity through 0.9.5 Missing Authorization in Telegram Binding Routes

CVE-2026-108751

MoAI-ADK through 3.1.2 Symlink Following via moai init Template Deployer

CVE-2026-108746

Vearch 3.5.2 through 3.5.9 Incorrect Authorization via Role.HasPermissionForResources

CVE-2026-108740

GoatCounter through 2.7.0 Privilege Escalation via /user/pref Mass Assignment

CVE-2026-108735

Miniflux 2.3.0 through 2.3.3 SSRF via Per-Feed Proxy URL

CVE-2026-108730

Raven 2.0.0 through 3.0.0 Missing Authorization via Legacy Message and File APIs

CVE-2026-108725

Cheshire Cat AI core through 2.0.23 Stored XSS via uploads plugin

CVE-2026-108720

phpIPAM through 1.8.3 Missing Authorization in Customers, Locations and NAT Pages

CVE-2026-108715

LibreNMS through 26.9.1.1 Authorization Bypass via Smokeping Graph auth.inc.php