← All credits
skeletonsec
28 vulnerability records and advisories credit this contributor.
CVE-2026-121432
AzuraCast before 0.24.0 CRLF Injection via Mount display_name in PLS Playlist
CVE-2026-112775
Craft CMS 5.0.0 before 5.11.0 Verification Code Reuse via users/set-password
CVE-2026-105833
EspoCRM before 10.0.5 IDOR via PersonalAccount Service Exposes IMAP Passwords
CVE-2026-86197
Grav before 2.0.20 Cross-Site Scripting via Assets Sandbox
CVE-2026-104441
YesWiki before 4.6.7 Unauthenticated SSRF via valeur Action
CVE-2026-104438
YesWiki before 4.6.7 Information Disclosure via listpagestag and includepages Actions
CVE-2026-104442
YesWiki before 4.6.7 Unauthenticated SSRF via syndication Action
CVE-2026-104440
YesWiki before 4.6.7 Blind SSRF via bazarlist API idtypeannonce Parameter
CVE-2026-104439
YesWiki before 4.6.7 User Enumeration via Lost-Password Flow
CVE-2026-82238
filebrowser 2.24.0 Race Condition via TUS concurrent PATCH uploads