← All credits
hieuPenguinnn
342 vulnerability records and advisories credit this contributor.
CVE-2026-110109
JetLinks Community through 2.10.0 Missing Authorization via Product-Level Transparent Codec Save
CVE-2026-110116
Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager storeFile
CVE-2026-110121
PickMall lilishop through 4.4 IDOR via Goods Edit Endpoint
CVE-2026-110126
waynboot-mall through 2.0.0 IDOR via Mobile Address Endpoints
CVE-2026-108698
hyper-mcp through 0.8.3 OCI Plugin Signature Verification TOCTOU Race Condition
CVE-2026-108852
Deep Chat through 2.5.1 XSS via Markdown Link Validation Bypass
CVE-2026-108857
Hugging Face Text Embeddings Inference through 1.9.4 Cleartext API Key Logging
CVE-2026-108862
APIPark through 1.9.7-beta IDOR via application authorization endpoints
CVE-2026-108861
Odoo MCP 1.0.0 through 1.3.2 Information Disclosure via execute_method Tool
CVE-2026-108856
UnicomAI Wanwu through 0.6.5 Authorization Bypass via /v1/appspace/app/key AppKey Minting