← All credits
Zach Hanley (@hacks_zach) of Horizon3.ai, in collaboration with Claude and Anthropic Research
6 vulnerability records and advisories credit this contributor.
CVE-2026-61505
Rejetto HFS < 3.2.1 Limited File Disclosure via Path Traversal in lang Parameter
CVE-2026-61504
Rejetto HFS < 3.2.1 Stored XSS via File Names in Basic Web Listing
CVE-2026-61503
Rejetto HFS < 3.2.1 Username Enumeration via Login Response Differences
CVE-2026-61502
Rejetto HFS < 3.2.1 Cross-Site Request Forgery via GET Requests
CVE-2026-61501
Rejetto HFS < 3.2.1 Stored XSS in Admin Log Viewer
CVE-2026-61500
Rejetto HFS < 3.2.1 Session Forgery via Predictable Signing Key