← All credits

leediay153 from Viettel Post

124 vulnerability records and advisories credit this contributor.

CVE-2026-112783

OpenCATS before 0.10.0 Missing Authorization via Activity AJAX Endpoints

CVE-2026-112293

BoxyHQ SaaS Starter Kit through 1.6.0 Missing Authorization on Team Payment API

CVE-2026-114391

ZenTao PMS before 22.3 Authorization Bypass via Ajax Controller Methods

CVE-2026-114396

Trudesk through 1.2.11 MongoDB $where Injection via tickets search API

CVE-2026-114401

Trudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/login

CVE-2026-113359

Baserow before 2.3.0 Cross-Workspace Data Disclosure via unique_row_values Endpoint

CVE-2026-113598

Modoboa before 2.8.0 IDOR via API v2 alarms bulk_delete

CVE-2026-114389

Chamilo LMS 2.0.0-alpha.4 before 2.0.0-RC.3 Missing Authorization via openAnswerGrade

CVE-2026-114394

Trudesk through 1.2.11 Authorization Bypass via Ticket Comment and Create APIs

CVE-2026-114399

Trudesk through 1.2.11 Path Traversal via Backup Delete and Restore API