← All credits

leediay153 from Viettel Post

124 vulnerability records and advisories credit this contributor.

CVE-2026-110629

VentureDrake Laravel CRM before 2.4.0 Missing Authorization via Livewire Actions

CVE-2026-110624

Papermerge Core through 3.5.3 Missing Authorization via /tags/all and /document-types/all

CVE-2026-108100

HortusFox before 6.2 SQL Injection via /api/locations/list include_info Parameter

CVE-2026-110098

Jorani before 1.0.4 Insecure Direct Object Reference in Leave and Overtime Requests

CVE-2026-110218

Aureus ERP through 1.6.0 Unpublished Blog Post Disclosure via Direct URL

CVE-2026-110229

QloApps through 1.7.0 Missing Hotel Access Restriction in Credit Slips

CVE-2026-108108

PHPNuxBill through 2025.3.20 CHAP Authentication Bypass via Password::chap_verify()

CVE-2026-110219

QloApps through 1.7.0 Reflected XSS via Additional Facility Price Field

CVE-2026-110224

QloApps through 1.7.0 Reflected XSS via Search Alias Validation Errors

CVE-2026-108164

Open Source Social Network (OSSN) through 10.1 IDOR via Message Attachment Route