← All credits

hieuPenguinnn

336 vulnerability records and advisories credit this contributor.

CVE-2026-125387

Faveo Helpdesk through 2.0.3 Cross-Department Ticket Tampering via TicketController

CVE-2026-125386

langchain4j-aideepin through 3.32.0 IDOR via /character/message reference endpoints

CVE-2026-125385

INDOTALENT WHMS before 10.20261109 Path Traversal via FileDocument/GetDocument and FileImage/GetImage

CVE-2026-125384

INDOTALENT WHMS before 10.20261109 Default Administrator Credentials via UserAdminSeeder

CVE-2026-125383

INDOTALENT WHMS before 10.20261109 Hard-Coded JWT Signing Key Authentication Bypass

CVE-2026-125382

Map-OS 5.0.0 to before 5.2.2 Privilege Escalation via /api/v1/usuarios

CVE-2026-125381

DataRoom through 3.0.0 SQL Injection via MyBatisService.generateSql

CVE-2026-125380

DataRoom through 3.0.0 Incorrect Authorization via /dataRoom/dataset/run/test

CVE-2026-125379

Movim through 0.35.5 Authorization Bypass via Post::ajaxGetPost Cached Post Read

CVE-2026-125378

PowerDNS-Admin before 2026.11.0 Missing Authorization via Template Apply Endpoint