← All credits

hieuPenguinnn

342 vulnerability records and advisories credit this contributor.

CVE-2026-111324

rustdesk-api through 2.7 Authorization Bypass via POST /api/sysinfo

CVE-2026-111313

JobOps through 0.13.1 SSRF via POST /api/manual-jobs/fetch

CVE-2026-111723

LingGuo-Drama through commit 8a6924a Broken Access Control via /admin/v1/admins API

CVE-2026-110773

GrowChief through 0.3.0 Missing Authorization via /users/all-users Endpoint

CVE-2026-110768

holaOS through 2026.822.1 Authorization Bypass via Telegram Connector Username Allowlist

CVE-2026-110763

lamp-boot 4.16.0-java17 through 4.21.2-java17 IDOR via /anyone/findDeptByCompany

CVE-2026-110719

Portkey AI Gateway 1.14.0 through 1.15.2 SSRF via x-portkey-custom-host Header

CVE-2026-110616

NullHub through 2026.5.29 Missing Authentication for /api Management API

CVE-2026-110611

REBUILD through 4.5.0 Authorization Bypass via aibot2 Chat Endpoints chatid

CVE-2026-111720

fish-island-backend through commit 7c61b78 SSRF via /api/web/parse