← All credits
leediay153 from Viettel Post
124 vulnerability records and advisories credit this contributor.
CVE-2026-114403
PHPOffice PHPPresentation through 1.2.0 Deserialization via Reader\Serialized::load
CVE-2026-114398
Trudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogo
CVE-2026-114393
Trudesk through 1.2.11 Authorization Bypass via Ticket Update API Endpoints
CVE-2026-114388
Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization via GradebookController
CVE-2026-114402
Trudesk through 1.2.11 Path Traversal and Authorization Bypass via Profile Image Upload
CVE-2026-114397
Trudesk through 1.2.11 Missing Authentication on Debug Routes
CVE-2026-114392
Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/tickets/:uid
CVE-2026-114387
Shopper 2.0.0 before 2.6.0 Privilege Escalation via Unguarded Livewire Components
CVE-2026-110100
Jorani before 1.0.4 Missing Authorization and SSRF via Contracts::import()
CVE-2026-110620
Formbricks before 4.9.0 Cross-Organization IDOR in Server Actions via organizationId