← All credits
alham-rizvi
53 vulnerability records and advisories credit this contributor.
CVE-2026-74802
SiYuan 3.7.3 Cross-Site WebSocket Hijacking via network proxy
CVE-2026-72696
Grav CMS before 2.0.16 Symlink Following via createLockFile
CVE-2026-56707
Grav Flex Objects 1.4.0 through 1.4.7 Authorization Bypass via Shortcode
CVE-2026-62204
SiYuan before v3.7.4 Plugin Overwrite via Bazaar Install
CVE-2026-59809
SiYuan before v3.8.0 Secret Exfiltration via http_request URL
CVE-2026-56709
Grav before 3.9.2 Host Header Injection via sendInvitationEmail
CVE-2026-80204
Grav before 1.0.18 Authentication Bypass via Scoped API Key
CVE-2026-56708
Grav API Plugin before 1.0.16 SSRF via DNS Rebinding
CVE-2026-72700
Grav before 3.9.1 Timing Attack via Non-Constant-Time Token Comparison
CVE-2026-56710
Grav Login Plugin before 1.0.16 Privilege Escalation via Unlock