← All credits
Hamed Kohi
9 vulnerability records and advisories credit this contributor.
CVE-2026-58141
Dify < 1.15.0 SSRF Protection Bypass via Remote-Files Endpoints
CVE-2026-49142
OpenEMR Before 8.5.0 SQL Injection via form_icd_codes[]
CVE-2026-39924
Flarum < 1.8.16 Session Persistence via Improper Access Token Revocation
CVE-2026-39923
Flarum < 1.8.16 Password Reset Token Expiry Bypass via POST /reset
CVE-2026-34429
Vvveb < 1.0.8.1 Stored XSS via Media Upload and Rename
CVE-2026-25552
Ghost CLI < 1.30.1 IP Spoofing via X-Forwarded-For Header
CVE-2026-61520
Simple Machines Forum SSRF via image proxy
CVE-2026-34905
Apache Answer: Unlisted Questions Accessible via Direct API Access
CVE-2025-29868
Apache Answer: Using externally referenced images can leak user privacy.