← All credits

hieuPenguinnn

342 vulnerability records and advisories credit this contributor.

CVE-2026-111636

OpenBMB StaffDeck through 0.5.6 Authentication Bypass via Hard-Coded Session Secret

CVE-2026-111641

FastapiAdmin through 3.0 Authentication Bypass via Auto-Login Endpoints

CVE-2026-111646

SurveyKing before 1.13.0 Unauthenticated File Download via /api/public/preview

CVE-2026-111651

Risesoft Digital-Infrastructure through 9.6.11 Cross-Tenant Data Exposure via DownloadController

CVE-2026-111656

ChatWiki through 2.9.6 Cross-Tenant IDOR via Form Filter Management Endpoints

CVE-2026-111661

waynboot-mall through 2.0.0 Missing Authentication via /callback/email Mail Endpoint

CVE-2026-111666

Steedos Platform through 3.0.15-beta.51 Cross-Tenant Information Disclosure via Reports API

CVE-2026-111671

Cube-studio through 2026.09.01 IDOR via Notebook and Serving Lifecycle Endpoints

CVE-2026-111676

Faveo Helpdesk through 2.0.3 Broken Access Control via /ticket/tooltip Endpoint

CVE-2026-111681

EFAK through 5.1.0 Privilege Escalation via /api/users REST API