← All credits

leediay153 from Viettel Post

124 vulnerability records and advisories credit this contributor.

CVE-2026-125395

Ampache before 8.4.0 Stored XSS via Song Lyrics ID3 Tag

CVE-2026-125390

Group-Office before 6.8.181, 25.0.116, and 26.0.58 Local File Read via processUploadQueue

CVE-2026-125389

Group-Office before 6.8.181, 25.0.116, and 26.0.58 Stored XSS via filterXSS Bypass

CVE-2026-125388

Group-Office before 6.8.181, 25.0.116, and 26.0.58 Missing Authorization in Forms Report Download

CVE-2026-123620

Usermin through 2.570 OS Command Injection via Read Mail IMAP Folder Deletion

CVE-2026-123094

Huginn before 2026.11.05 Stored XSS via OAuth Service Display Name

CVE-2026-124474

MRBS before 1.12.3 Reflected XSS via error parameter of view_entry.php

CVE-2026-123621

Usermin through 2.570 Path Traversal File Write via detachall.cgi

CVE-2026-123622

Usermin through 2.570 XSS via mailbox detach.cgi type Parameter

CVE-2026-115322

Bytebase before 3.16.0 Authorization Bypass via Rollout Service Task Run Handlers