← All credits

hieuPenguinnn

342 vulnerability records and advisories credit this contributor.

CVE-2026-111663

Chaskiq through 2.0.3 SSRF via createUrlUpload GraphQL Mutation

CVE-2026-111668

AIHelms through 0.1.25 Missing Authorization in Efficiency Analytics API

CVE-2026-111683

Allegro Ralph through 20260902.1 Missing Authorization in Data Center Rack API

CVE-2026-111693

DataBuff ai-apm-web through 0.1.10 Hard-Coded Default Admin Credentials

CVE-2026-111719

Roncoo-pay through commit 9428382 Information Disclosure via /f2fPay/order/query

CVE-2026-111709

WhaTicket Community through commit cf04795 IDOR via /tickets/:ticketId and /messages/:ticketId

CVE-2026-111704

LangChat through commit 2a6285a Missing Authentication on REST API Controllers

CVE-2026-111699

Niefy wx-api through 0.8.2 Authentication Bypass via Unverified openid Cookie

CVE-2026-111694

qKnow through 2.4.3 Missing Authentication via /flyflow Workflow Endpoints

CVE-2026-111689

XBoot through 3.3.4 Authorization Bypass via getByDepartmentId Endpoint