← All credits
hieuPenguinnn
342 vulnerability records and advisories credit this contributor.
CVE-2026-110128
fuint through commit 4c4bc8a Missing Authentication via /clientApi/order/detail
CVE-2026-110123
Makunet maku-boot 4.3.0 through 5.0.0 Missing Authorization via Mail and SMS Config Endpoints
CVE-2026-110118
WorkFlow-Engine through 9.6.11 Missing Authorization via flowableui buttonOperation Endpoints
CVE-2026-110113
PublicCMS through V6.202608.a IDOR via tradeAddress/save Endpoint
CVE-2026-110106
RuoYi-Vue-Plus through 6.0.0 IDOR via DELETE /auth/unlock/{socialId}
CVE-2026-111606
Huly Platform through 0.7.432 Account Takeover via mergeSpecifiedPersons RPC
CVE-2026-111611
roncoo-education through 25.0.0-RELEASE IDOR via Order Pay Cancel and Continue Endpoints
CVE-2026-111616
Oqtane Framework through 10.2.6 Cross-Site Settings Disclosure via Setting API
CVE-2026-111621
TDuck Survey Form through 5.3 Missing Authorization via /user/form/setting/{key}
CVE-2026-111626
Webreaper Damselfly through 4.5.3 Missing Authentication on REST API Controllers