← All credits
sondt99
25 vulnerability records and advisories credit this contributor.
CVE-2026-104472
YesWiki before 4.6.7 Missing Authorization via Attachment Download Handler
CVE-2026-104466
YesWiki before 4.6.7 Stored XSS via Wakka Markdown Image src Attribute
CVE-2026-100631
Parse Server 9.0.0 Unauthenticated Installation Deletion via Operator Injection
CVE-2026-101085
Nezha before 2.3.8 Denial of Service via Alert Rule
CVE-2026-91773
Soft Serve 0.7.1 through 0.11.6 Information Disclosure via LFS Locks
CVE-2026-92959
vm2 before 3.11.8 allowAsync Bypass via Promise Thenable
CVE-2026-82661
Nodemailer CRLF Injection via List-* Header Comments
CVE-2026-82660
Nodemailer jsonTransport bypasses disableFileAccess and disableUrlAccess
CVE-2026-75859
CodeWhale before 0.8.64 Arbitrary File Read via instructions
CVE-2026-75911
CodeWhale before 0.8.64 Remote Code Execution via allow_shell