← All credits
leediay153 from Viettel Post
124 vulnerability records and advisories credit this contributor.
CVE-2026-116008
DaybydayCRM through 2.2.1 Missing Authorization via ProjectsController updateAssign
CVE-2026-115334
Lotus through 0.10.2 Authorization Bypass via switch_organization Endpoint
CVE-2026-115330
Lotus through 0.10.2 SQL Injection via Custom SQL Billable Metrics
CVE-2026-121560
LogChimp before 0.9.3 Authorization Bypass via PATCH /api/v1/posts
CVE-2026-115509
Jitsu Console before 2.14.0-beta.41 Cross-Workspace Authorization Bypass via sources/state API
CVE-2026-115332
Lotus through 0.10.2 SQL Injection via Subscription Filter Keys
CVE-2026-115324
mem0 0.1.117 before 1.0.8 SQL Injection via Databricks Vector Store
CVE-2022-51026
Bytebase 0.12.0 before 1.0.1 Authentication Bypass via GitLab Self-Hosted Login
CVE-2026-115331
Lotus through 0.10.2 SQL Injection via Metric Property Names and Filters
CVE-2026-115323
EverShop 1.2.2 before 2.2.1 Missing Authorization via Customer Address API