← All credits
hieuPenguinnn
342 vulnerability records and advisories credit this contributor.
CVE-2026-117605
nopCommerce before 5.00.0 Missing Authorization via Admin ProductController Add Popup Handlers
CVE-2026-110613
youlai-mall through commit 9f62de8 Order Information Disclosure via App Order List
CVE-2026-109391
Square Squash through commit e73f280 Unauthenticated YAML Deserialization via Symbolication API
CVE-2026-110105
B3log Symphony through 3.6.4 Missing Authorization in Admin Console Routes
CVE-2026-110110
JetLinks Community through 2.10.0 Missing Authorization via Alarm Enable/Disable Endpoints
CVE-2026-110117
SmartAdmin through 3.30.0 Missing Authorization via AdminProtectController
CVE-2026-110122
PickMall lilishop through 4.4 IDOR via Goods Freight Endpoint
CVE-2026-110127
waynboot-mall through 2.0.0 IDOR via Mobile Cart Endpoints
CVE-2026-110210
Phase Console through 2.77.3 Missing Authorization via secretHistory GraphQL Query
CVE-2026-110215
youlai-boot through 2.21.1 Missing Authorization in Role Menu Assignment Allows Privilege Escalation