← All credits

hieuPenguinnn

342 vulnerability records and advisories credit this contributor.

CVE-2026-119657

FilePress through 3.0.1 Missing Authorization in PicHome Library Folder Operations

CVE-2026-119661

ShowDoc through 3.9.5 Authorization Bypass via paramDescLib deleteEntries

CVE-2026-119665

WHartTest 2.2.0 through 2.8.1 Missing Authorization via task_center Scheduled-Task APIs

CVE-2026-108696

CoreShop through 1.5.5 Authorization Bypass via OrderController OrderConfirm and SendReship

CVE-2026-119599

AxonHub through 1.0.0-beta11 Privilege Escalation via Service Account API Key Scopes

CVE-2026-116017

Xiaozhi-esp32-server before 0.9.8 IDOR via device address-book endpoint

CVE-2026-119048

JeeSite 5.11.0 through 5.19.1 IDOR in AI CMS Chat Module

CVE-2026-116018

ONEARMY community-platform before 2.165.2 IDOR via notification read endpoint

CVE-2026-119049

FreeMail before 5.3.2 Authorization Bypass via /api/create Mailbox Claiming

CVE-2026-117564

nest-admin before 1.0.1 Authentication Bypass via Hardcoded JWT Secret