← All credits
hieuPenguinnn
342 vulnerability records and advisories credit this contributor.
CVE-2026-111707
99AI through 4.3.0 IDOR via /api/chatLog/querySingleChat Chat Message Disclosure
CVE-2026-111717
Arkon through 0.9.2 Missing Authorization via Skills Versions API
CVE-2026-111722
LingGuo-Drama through commit 8a6924a IDOR via /admin/v1/projects/:id API
CVE-2026-111697
HUIZHI ChargeOS cloud through 3.0.9 IDOR via hcp-mp Member and Order APIs
CVE-2026-111323
RedAmon through 7.0.1 Unauthenticated SSRF via /tradecraft/verify Endpoint
CVE-2026-111347
go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwd
CVE-2026-110608
BizSpring Shop through commit cf22d39daaf1 IDOR via /member/order Cancel and Receive
CVE-2026-110618
SmsForwarder through 3.5.0 Missing Authentication in HTTP Server Remote Control API
CVE-2026-110775
Nexent through 2.7.0 Cross-Tenant Knowledge-Base File Read via check_file_access
CVE-2026-111321
TaskingAI through 0.3.0 SSRF via OpenAPI servers[0].url in Actions