← All credits

leediay153 from Viettel Post

124 vulnerability records and advisories credit this contributor.

CVE-2026-114400

Trudesk through 1.2.11 Missing Authentication for Ticket Attachments via /uploads

CVE-2026-115321

Bytebase before 3.16.0 Authorization Bypass via UpdateIssueComment

CVE-2026-115325

Netmaker through 1.7.0 Authorization Bypass via updateExtClient Unscoped Lookup

CVE-2026-115329

Lotus through 0.10.2 Cross-Organization IDOR via SubscriptionViewSet

CVE-2026-115333

Lotus through 0.10.2 Improper Authentication via Event Ingestion API Key Prefix

CVE-2026-113595

Sharkord before 0.0.26 Missing Authorization via changeLogo tRPC Route

CVE-2026-113600

Fat Free CRM before 0.26.0 IDOR via CommentsController update and destroy

CVE-2026-113601

Memos before 0.27.0 Missing Authorization via ActivityService ListActivities/GetActivity

CVE-2026-113596

Webstudio before 0.256.0 Information Disclosure via tRPC publishedBuilds and findManyByIds

CVE-2026-113349

OpenCATS before 0.10.0 Missing Authorization in Calendar editEvent/deleteEvent