← All credits

hieuPenguinnn

336 vulnerability records and advisories credit this contributor.

CVE-2026-125377

Pig before 4.1.2 Missing Authorization Exposes OAuth2 Client Secrets via /client

CVE-2026-125376

VanBlog through 0.54.0 Private Article Disclosure via Public Password Endpoint

CVE-2026-125375

MrDoc through 1.1.1 Missing Authorization via Project Document Sort Handlers

CVE-2026-125374

Krayin CRM before 2.2.8 Broken Object Level Authorization via Lead Tag Attach/Detach

CVE-2026-125373

IETF Datatracker before 12.83.0 Cross-NomCom Authorization Bypass via Nomcom Views

CVE-2026-125372

REBUILD before 4.5.3 Authorization Bypass via Feeds Details and Comments Endpoints

CVE-2026-123782

ChatWiki before 2.10.0 Cross-Tenant IDOR via SaveFormField and UpdateFormRequired

CVE-2026-122327

Meelo through 3.13.1 Missing Authorization on Song, Track and Video Endpoints

CVE-2026-122317

SplitPro through 2.1.6 Authorization Bypass via user.getUserDetails tRPC Query

CVE-2026-123197

WPPConnect Server through 2.10.76 Unauthenticated Sticker Media Disclosure via /files