← All credits

leediay153 from Viettel Post

124 vulnerability records and advisories credit this contributor.

CVE-2026-110626

ClipBucket v5 through 5.5.3-#206 Reflected XSS via edit_language in language_settings.php

CVE-2026-110621

Swetrix Cloud before 5.1.0 Missing Authorization via POST /project/organisation/:orgId

CVE-2026-112292

CheckCle through 1.6.0 Missing Authorization via Empty PocketBase API Rules

CVE-2026-112291

Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 Missing Authorization via Task API

CVE-2026-108950

Open Source Social Network (OSSN) through 10.1 Missing Authorization via Album Photo Routes

CVE-2026-109393

QloApps through 1.7.0 Insecure Direct Object Reference in Back-Office AJAX Handlers

CVE-2026-110226

QloApps through 1.7.0 Authorization Bypass via id_hotel in Room Type Creation

CVE-2026-110221

QloApps through 1.7.0 Reflected XSS via Advanced Price Rule Name and Impact Value

CVE-2026-111284

Aureus ERP through 1.6.0 Stored XSS via Time Off Holiday Action Modal

CVE-2026-111632

Aureus ERP through 1.6.0 Multi-Company Authorization Bypass via company_id