← All credits

hieuPenguinnn

342 vulnerability records and advisories credit this contributor.

CVE-2026-110220

Kubeflow Model Registry through 0.3.17 SSRF via InferenceService Controller URL Annotation

CVE-2026-110225

Shaarli through 0.16.9 SSRF via Thumbnail Retrieval update-thumbnail Route

CVE-2026-110231

muCommander through 1.6.2 Path Traversal via Archive Extraction to FTP/SFTP

CVE-2026-110236

KDE Dolphin 24.08.0 through 26.08.2 OS Command Injection via Crafted Folder Name

CVE-2026-116015

yudao-cloud through 2026.09 IDOR via after-sale-log list endpoint

CVE-2026-110610

ruoyi-vue-pro through 2026.09 SSRF via Midjourney referImageUrl and notify imageUrl

CVE-2026-111312

OpenHealth through 0.2.0 Missing Authentication via /api/health-data/[id] Route

CVE-2026-111332

OxiCloud 0.9.1 through 0.9.3 Incorrect Authorization via Share Ring Cookie

CVE-2026-111352

ThinkCMF through 8.0.1 Incorrect Authorization in Admin REST API

CVE-2026-111603

PlayEdu through 2.3 Missing Authorization via Student CourseController Endpoints