← All credits

hieuPenguinnn

342 vulnerability records and advisories credit this contributor.

CVE-2026-111684

Magistrala through 1.0.0 Cross-Tenant Authorization Bypass in Certs Service

CVE-2026-111674

Tbed through 20240319 Missing Authorization via setImgFileName Endpoint

CVE-2026-111669

ZR.Admin.NET through 3.8.2 SQL Injection via PagerInfo.Sort ORDER BY

CVE-2026-111659

Waynboot-mall through 2.0.0 Unauthenticated Order Forgery via /callback/order/submit

CVE-2026-111654

FastBee through 2.1.0 IDOR via /iot/group By-ID Endpoints

CVE-2026-111649

Rocboss paopao-ce through 0.6.0-alpha.3 IDOR via DownloadAttachment Endpoint

CVE-2026-111644

Misaka Danmu Server through 2.8.9 Missing Authentication on /api/ui Routes

CVE-2026-111639

bbs-go through 4.4.6 Account Takeover via Google One Tap Login

CVE-2026-111634

Helical Insight through 7.0.0 SQL Injection via /executeDatasource

CVE-2026-111629

IoTSharp through 3.6.1 Cross-Tenant Data Exposure via Customers and Devices APIs