← All credits
tinyb0y
13 vulnerability records and advisories credit this contributor.
CVE-2026-124466
OpenEMR before 8.4.0 Unauthenticated SSRF via OAuth2 Client jwks_uri
CVE-2026-124436
OpenRemote before 1.32.2 Improper Authorization Allows Realm Admins to Modify Global Resources
CVE-2026-124435
OpenRemote before 1.32.2 Stored XSS via Manager Configuration Image Upload
CVE-2026-68498
jackson-core: Delayed maxNameLength enforcement for char-backed input (ReaderBasedJsonParser) allows memory-exhaustion denial of service
CVE-2026-107335
Improper Handling of Highly Compressed Data in Malcolm
CVE-2026-107334
Incorrect Authorization in Malcolm
CVE-2026-76222
GitPython before 3.1.58 Path Traversal via .gitmodules Submodule Name
CVE-2026-68495
jackson-dataformats-binary: CBOR parser does not enforce StreamReadConstraints.maxNameLength, enabling memory-exhaustion denial of service
CVE-2026-68496
jackson-dataformats-binary: Smile parser does not enforce StreamReadConstraints.maxNameLength, enabling memory-exhaustion denial of service
CVE-2026-70410
Apache Calcite Avatica: Unrestricted class initialization when instantiating plugins