← All credits
leediay153 from Viettel Post
124 vulnerability records and advisories credit this contributor.
CVE-2026-105836
QloApps through 1.7.0 Authorization Bypass via ajaxProcessBulkUpdateRooms
CVE-2026-110623
Papermerge Core through 3.5.3 Missing Authorization in Shared Nodes API
CVE-2026-110628
Kan 0.5.5 through 0.6.0 Unauthenticated SSRF via /api/download/attatchment
CVE-2026-110878
Aureus ERP through 1.6.0 Stored XSS via Inventory Rule Action Information
CVE-2026-109394
Thirty bees through 1.7.0 Account Takeover via PasswordController Guest Checkout
CVE-2026-110625
ClipBucket v5 through 5.5.3-#206 Reflected XSS via type Parameter in flagged_item.php
CVE-2026-110630
VentureDrake Laravel CRM before 2.4.0 Privilege Escalation via Unscoped Role Assignment
CVE-2026-110627
ClipBucket v5 through 5.5.3-#206 Reflected XSS via add_todo val Parameter
CVE-2026-110622
Papermerge Core through 3.5.3 Missing Authorization in Page Management and OCR Endpoints
CVE-2025-71433
Kaneo before 2.1.6 Missing Authorization Allows Cross-Workspace Data Access